General
- Target 2026-09-04_239f7c153611b847ece25bb896151ef4_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- Sample260905-tvcexsyapc
- SHA256 691ab09996ad8196e6565ef63c12511804d1b3a2937c87cd65af1a401ff5fe6c
- MD5 239f7c153611b847ece25bb896151ef4
- SHA1 5c3e234e20a553002651f05c4bc8f207c3a8a63b
- SHA512 6f258fef0f68285afbb92dec10a74d17ffdd7be5446c5701f8b8c79a1170af61c605a1d0e5bda8c1166a22d26a6357010b62a318efab0802bbc95dbc32a3ffb8
- SSDEEP 49152:htrqOMudxX6otAsB5uXHIzbT5hIIrTmGYzSrb66KlO:jWOBdxX6ot4XIb4IHezSrb7g
- TLSH T152B5AF92F245ACE9E80725B59C7DCA2124077E7D46B9560E358F722A95B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_239f7c153611b847ece25bb896151ef4_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_239f7c153611b847ece25bb896151ef4_amadey_elex_loda_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_239f7c153611b847ece25bb896151ef4_amadey_elex_loda_rhadamanthys_smoke-loader
- Size 2.3MB
- SHA256 691ab09996ad8196e6565ef63c12511804d1b3a2937c87cd65af1a401ff5fe6c
- MD5 239f7c153611b847ece25bb896151ef4
- SHA1 5c3e234e20a553002651f05c4bc8f207c3a8a63b
- SHA512 6f258fef0f68285afbb92dec10a74d17ffdd7be5446c5701f8b8c79a1170af61c605a1d0e5bda8c1166a22d26a6357010b62a318efab0802bbc95dbc32a3ffb8
- SSDEEP 49152:htrqOMudxX6otAsB5uXHIzbT5hIIrTmGYzSrb66KlO:jWOBdxX6ot4XIb4IHezSrb7g
- TLSH T152B5AF92F245ACE9E80725B59C7DCA2124077E7D46B9560E358F722A95B338330B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE