General
- Target 2026-08-21_0246dcc73e827e0a4afc79f58b89d6e9_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 328KB
- Sample260822-yl22faydqf
- SHA256 e2ee79a66cbf11b7a6f019f3d523e3460c97eb28a9caf3cac8249bb4be6013f1
- MD5 0246dcc73e827e0a4afc79f58b89d6e9
- SHA1 81ca25bc4846780a1a2467d481af4a5edfd5989f
- SHA512 9d74d6059935c769d67605eb828dd5c1d0561d4454ae6692c22bc6fa02dbf9e7b1c06d18971750f65dc464352ac1cc5b5e10b031193d0309c024c2be39cf08be
- SSDEEP 3072:5dXi+V5Kgxpdxj8gbib20xTyst542t8ZHWBow8+zoB91wDQgJl0x2AEMenKbZis0:5d7rpL43btmQ58Z27zw39gY2FeZG
- TLSH T12A64AD253580C435F72A07320446FAF10A66AC391999E54FFBB8BD79AD311978B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_0246dcc73e827e0a4afc79f58b89d6e9_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-21_0246dcc73e827e0a4afc79f58b89d6e9_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 328KB
- SHA256 e2ee79a66cbf11b7a6f019f3d523e3460c97eb28a9caf3cac8249bb4be6013f1
- MD5 0246dcc73e827e0a4afc79f58b89d6e9
- SHA1 81ca25bc4846780a1a2467d481af4a5edfd5989f
- SHA512 9d74d6059935c769d67605eb828dd5c1d0561d4454ae6692c22bc6fa02dbf9e7b1c06d18971750f65dc464352ac1cc5b5e10b031193d0309c024c2be39cf08be
- SSDEEP 3072:5dXi+V5Kgxpdxj8gbib20xTyst542t8ZHWBow8+zoB91wDQgJl0x2AEMenKbZis0:5d7rpL43btmQ58Z27zw39gY2FeZG
- TLSH T12A64AD253580C435F72A07320446FAF10A66AC391999E54FFBB8BD79AD311978B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE