General
- Target 2026-09-09_ffdcff42bc12862e02f2dd7ae6136d33_amadey_elex_rhadamanthys_smoke-loader
- Size 76KB
- Sample260910-znvktagp2y
- SHA256 2a7dc27c6ec0d6565466c972e2c2573b8b564bd587f334ccd7060925aa9570e7
- MD5 ffdcff42bc12862e02f2dd7ae6136d33
- SHA1 1f4a7a0b2525f828891a1189934a2ebf19ba61dc
- SHA512 51e3c101713a6d17af5503c455ab41d637eb3d755a41b2fdabf4a5ad19e6122930861fe60e07dacad55768da857bb913d0025eb47a76fc524e36b47951e2d93f
- SSDEEP 1536:E0ktmioyHil5kBionHDtaPM3jIHO+bXbX4QK4kcvx2XHjlj:Ty8iionHDP3jIHO+jbX4QK4kcvx2XHV
- TLSH T120737D1337C189B2F96380B1487ACB21535BB82187A142CF7A9A7B0F9E733D149B7657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_ffdcff42bc12862e02f2dd7ae6136d33_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_ffdcff42bc12862e02f2dd7ae6136d33_amadey_elex_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_ffdcff42bc12862e02f2dd7ae6136d33_amadey_elex_rhadamanthys_smoke-loader
- Size 76KB
- SHA256 2a7dc27c6ec0d6565466c972e2c2573b8b564bd587f334ccd7060925aa9570e7
- MD5 ffdcff42bc12862e02f2dd7ae6136d33
- SHA1 1f4a7a0b2525f828891a1189934a2ebf19ba61dc
- SHA512 51e3c101713a6d17af5503c455ab41d637eb3d755a41b2fdabf4a5ad19e6122930861fe60e07dacad55768da857bb913d0025eb47a76fc524e36b47951e2d93f
- SSDEEP 1536:E0ktmioyHil5kBionHDtaPM3jIHO+bXbX4QK4kcvx2XHjlj:Ty8iionHDP3jIHO+jbX4QK4kcvx2XHV
- TLSH T120737D1337C189B2F96380B1487ACB21535BB82187A142CF7A9A7B0F9E733D149B7657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.