General
- Target 2026-09-10_bc612778bd312054686fd1285dfc6510_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 503KB
- Sample260910-ngtt6awsds
- SHA256 dd0faccb68570914944fa4800fe6ad061c2d924bae67f4d9444aa5e2e063d693
- MD5 bc612778bd312054686fd1285dfc6510
- SHA1 52ac97e4ce3a3fe92adff0f2d590c8bb2f7eaea9
- SHA512 9a28c3493d4d911a88a07ee34f30aab6839f1ce14bb89ea8b7a16734b8bb464ceb8f444faab60d7d1d354cfeaf9133f9681f4a0830f99e8981ed0564186cb512
- SSDEEP 6144:/S4Oq+xNofxkNYFQQG8SdrL9Ti5v4gFcFhN87tW6cvC0WMQbv6FumphcKTtT1ZP3:fwYFQQG8SdrNa4gFK0IqXOFumphcKTpT
- TLSH T1A5B4C0213690C435E3A613764996E6B419997E345AA0D28FF7B83E799F301C39A3334F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-10_bc612778bd312054686fd1285dfc6510_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-09-10_bc612778bd312054686fd1285dfc6510_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 503KB
- SHA256 dd0faccb68570914944fa4800fe6ad061c2d924bae67f4d9444aa5e2e063d693
- MD5 bc612778bd312054686fd1285dfc6510
- SHA1 52ac97e4ce3a3fe92adff0f2d590c8bb2f7eaea9
- SHA512 9a28c3493d4d911a88a07ee34f30aab6839f1ce14bb89ea8b7a16734b8bb464ceb8f444faab60d7d1d354cfeaf9133f9681f4a0830f99e8981ed0564186cb512
- SSDEEP 6144:/S4Oq+xNofxkNYFQQG8SdrL9Ti5v4gFcFhN87tW6cvC0WMQbv6FumphcKTtT1ZP3:fwYFQQG8SdrNa4gFK0IqXOFumphcKTpT
- TLSH T1A5B4C0213690C435E3A613764996E6B419997E345AA0D28FF7B83E799F301C39A3334F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE