General
- Target 2026-08-25_ffdbe1ab2407b6c523b6685ef4fd731a_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 328KB
- Sample260825-3pt78axtct
- SHA256 10a7e0b4d749a497956966bf8a8bc877e7120a9c49487cc97e7b008e8473f97c
- MD5 ffdbe1ab2407b6c523b6685ef4fd731a
- SHA1 e36991ab8c0be5c8d8c4d7fcb010da86044bf68c
- SHA512 fd6bb87c4a738705bd58f29c0ecc898e171a05c1e5ff7bff3ac3a38975f162c479800b28f50305358c0c0bbe7097026eba6c44562e62b19ee8906faaa8305878
- SSDEEP 3072:5dXi+V5Kgxpdxj8gbib20xTyst542t8ZHWBow8+zoB91wDQgJl0x2AEMenKbZis3:5d7rpL43btmQ58Z27zw39gY2FeZN
- TLSH T1CC64AD253580C435F72A07320446FAF10A66AC391999E54FFBB8BD79AD311978B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-25_ffdbe1ab2407b6c523b6685ef4fd731a_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-25_ffdbe1ab2407b6c523b6685ef4fd731a_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 328KB
- SHA256 10a7e0b4d749a497956966bf8a8bc877e7120a9c49487cc97e7b008e8473f97c
- MD5 ffdbe1ab2407b6c523b6685ef4fd731a
- SHA1 e36991ab8c0be5c8d8c4d7fcb010da86044bf68c
- SHA512 fd6bb87c4a738705bd58f29c0ecc898e171a05c1e5ff7bff3ac3a38975f162c479800b28f50305358c0c0bbe7097026eba6c44562e62b19ee8906faaa8305878
- SSDEEP 3072:5dXi+V5Kgxpdxj8gbib20xTyst542t8ZHWBow8+zoB91wDQgJl0x2AEMenKbZis3:5d7rpL43btmQ58Z27zw39gY2FeZN
- TLSH T1CC64AD253580C435F72A07320446FAF10A66AC391999E54FFBB8BD79AD311978B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE