General
- Target 2026-09-10_eb2d152bb1f5949bc9addeff95fd27b0_amadey_elex_rhadamanthys_smoke-loader_stop_urelas
- Size 426KB
- Sample260910-k7fhnsam4w
- SHA256 7c1d16341344e6f816041f6fa4e947b0ac1a7ef89fce68e52423998dda904a9b
- MD5 eb2d152bb1f5949bc9addeff95fd27b0
- SHA1 96df2a4396bbe024a4a5ed48e2ee267480b47f05
- SHA512 adc78977f59c3bc1a814785fcb1b1ab7ff2558d6b94de4761823ef8237781cbfd66a157157a209160b9c7fbafe7d2e2467a3c555095345106d96566b7131ccce
- SSDEEP 6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOCx:oU7M5ijWh0XOW4sEfeOY
- TLSH T1A094CF263580C436F72A07324406FAE40A65AC3E1AD5E54FFB787E7968311979B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-10_eb2d152bb1f5949bc9addeff95fd27b0_amadey_elex_rhadamanthys_smoke-loader_stop_urelas.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-09-10_eb2d152bb1f5949bc9addeff95fd27b0_amadey_elex_rhadamanthys_smoke-loader_stop_urelas
- Size 426KB
- SHA256 7c1d16341344e6f816041f6fa4e947b0ac1a7ef89fce68e52423998dda904a9b
- MD5 eb2d152bb1f5949bc9addeff95fd27b0
- SHA1 96df2a4396bbe024a4a5ed48e2ee267480b47f05
- SHA512 adc78977f59c3bc1a814785fcb1b1ab7ff2558d6b94de4761823ef8237781cbfd66a157157a209160b9c7fbafe7d2e2467a3c555095345106d96566b7131ccce
- SSDEEP 6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOCx:oU7M5ijWh0XOW4sEfeOY
- TLSH T1A094CF263580C436F72A07324406FAE40A65AC3E1AD5E54FFB787E7968311979B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE