General
- Target 2026-09-09_f9b4fb5c25cf6d6ccbbde62306fb6dd9_amadey_elex_karagany_rhadamanthys_smoke-loader_tofsee
- Size 774KB
- Sample260910-z2agssweqd
- SHA256 00d667b1c141c838e7aaaa18247008f8ba487aeaed9891403c913ac9da6d73bd
- MD5 f9b4fb5c25cf6d6ccbbde62306fb6dd9
- SHA1 35b79f87ebcf4a81dc359fe9ff277ed61a84112e
- SHA512 51c079d22d677984f3678dbf8bc9842c3fcafe0cddb591ee0cd24d244463ac7b5d05764a850d3220d7f1ff18ab5987c161d7c8b7337449a013cf053cba5ea720
- SSDEEP 12288:AKOP/fq6FR0ikZpEaVQGPwv+7yUTihRQhE9ONs46pP3BHUbt/h:AZffWDEkQGY5GE9Or4By/h
- TLSH T1DCF4E0213200847AF36A0B314A54E6F40969AD3D16E8E58FF7787E7A69B01C3577B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-09_f9b4fb5c25cf6d6ccbbde62306fb6dd9_amadey_elex_karagany_rhadamanthys_smoke-loader_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.30.235
-
218.54.31.165
Targets
-
- Target 2026-09-09_f9b4fb5c25cf6d6ccbbde62306fb6dd9_amadey_elex_karagany_rhadamanthys_smoke-loader_tofsee
- Size 774KB
- SHA256 00d667b1c141c838e7aaaa18247008f8ba487aeaed9891403c913ac9da6d73bd
- MD5 f9b4fb5c25cf6d6ccbbde62306fb6dd9
- SHA1 35b79f87ebcf4a81dc359fe9ff277ed61a84112e
- SHA512 51c079d22d677984f3678dbf8bc9842c3fcafe0cddb591ee0cd24d244463ac7b5d05764a850d3220d7f1ff18ab5987c161d7c8b7337449a013cf053cba5ea720
- SSDEEP 12288:AKOP/fq6FR0ikZpEaVQGPwv+7yUTihRQhE9ONs46pP3BHUbt/h:AZffWDEkQGY5GE9Or4By/h
- TLSH T1DCF4E0213200847AF36A0B314A54E6F40969AD3D16E8E58FF7787E7A69B01C3577B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE