General
- Target 2026-09-03_c6ec7223a889f671e5cfc68197a7c157_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- Sample260903-2z8b6axfle
- SHA256 5badb8505331a576bc8d2497e9817be6dbdfaec0471541d7c564c817c5708161
- MD5 c6ec7223a889f671e5cfc68197a7c157
- SHA1 52be08015eda59432a8a37c4fe74f6ce46ea98df
- SHA512 0f4bf9805aed52d983d08e7fea18cb1a8cc76c3c396edc514364720bc032be022d3bacfc960f01e67becae496bf62b0f6183bd776130146d1d0eab4afea9d526
- SSDEEP 49152:YtrqOMudxX6SEDqqsPhSXSlZMs2/jZsYDKl2:WWOBdxX6SEDrKSXSlZijZ7Dg
- TLSH T1E6B5AF92F245ACE9E80315B59C7DCA2124477E7D4AB9560E358F722A95B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_c6ec7223a889f671e5cfc68197a7c157_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_c6ec7223a889f671e5cfc68197a7c157_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_c6ec7223a889f671e5cfc68197a7c157_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- SHA256 5badb8505331a576bc8d2497e9817be6dbdfaec0471541d7c564c817c5708161
- MD5 c6ec7223a889f671e5cfc68197a7c157
- SHA1 52be08015eda59432a8a37c4fe74f6ce46ea98df
- SHA512 0f4bf9805aed52d983d08e7fea18cb1a8cc76c3c396edc514364720bc032be022d3bacfc960f01e67becae496bf62b0f6183bd776130146d1d0eab4afea9d526
- SSDEEP 49152:YtrqOMudxX6SEDqqsPhSXSlZMs2/jZsYDKl2:WWOBdxX6SEDrKSXSlZijZ7Dg
- TLSH T1E6B5AF92F245ACE9E80315B59C7DCA2124477E7D4AB9560E358F722A95B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE