General
- Target 2026-09-03_5c6969559ba3fbc30d1ea95dbcc88467_amadey_elex_karagany_rhadamanthys_smoke-loader
- Size 366KB
- Sample260904-kfp8sseq41
- SHA256 58859397582ba1c26c56774012cccb4885a73678a3a57ae4100d543ede5cb04e
- MD5 5c6969559ba3fbc30d1ea95dbcc88467
- SHA1 65fc017145dd42d5432d2a2c32d381b55d575c8b
- SHA512 296ec493e50374b11bdb237a5a8363816771a3c0380ef59df70381b28426201c992fdd43ad4080d0d6ccd37450c15b71750a42b8058a82c55424de8f2c5313cc
- SSDEEP 6144:Eivd27I1O8aYQ7ATa7QT0KXCjLusuX0iZv7i04NTaRSKkMZP7KTllpOauLZHn8or:Eh8/BQ7Am7QzyjL80iZm0savzKTlHOaE
- TLSH T14784DF217250D03AE3650B3198A5E7B55A7DBC3910A5954FF3783A3A9E301C3AB3729F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-03_5c6969559ba3fbc30d1ea95dbcc88467_amadey_elex_karagany_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-09-03_5c6969559ba3fbc30d1ea95dbcc88467_amadey_elex_karagany_rhadamanthys_smoke-loader
- Size 366KB
- SHA256 58859397582ba1c26c56774012cccb4885a73678a3a57ae4100d543ede5cb04e
- MD5 5c6969559ba3fbc30d1ea95dbcc88467
- SHA1 65fc017145dd42d5432d2a2c32d381b55d575c8b
- SHA512 296ec493e50374b11bdb237a5a8363816771a3c0380ef59df70381b28426201c992fdd43ad4080d0d6ccd37450c15b71750a42b8058a82c55424de8f2c5313cc
- SSDEEP 6144:Eivd27I1O8aYQ7ATa7QT0KXCjLusuX0iZv7i04NTaRSKkMZP7KTllpOauLZHn8or:Eh8/BQ7Am7QzyjL80iZm0savzKTlHOaE
- TLSH T14784DF217250D03AE3650B3198A5E7B55A7DBC3910A5954FF3783A3A9E301C3AB3729F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE