General
- Target 2026-09-24_0190417304eb9e85a13103ab10620ee0_amadey_elex_rhadamanthys_smoke-loader_stop_urelas
- Size 425KB
- Sample260925-tk2l3afe53
- SHA256 142758a4987c5840cd5c0e410936196ec782fe6945a1a811b05a68249c21e9fc
- MD5 0190417304eb9e85a13103ab10620ee0
- SHA1 324ffa2c48184e23c3f56c894f9fd66900c0f68e
- SHA512 c7fbad73c85cc31c1f879a19c49a4513a0779565530d6dbef2b16f18fefc31af3991e8dfb3da5ea141c78885443c7269d046343f2d22157439e7afe0231b96ef
- SSDEEP 6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOC9:oU7M5ijWh0XOW4sEfeOA
- TLSH T16C94CF263580C436F72907324406FAE40A65AC3E1AD5E54FFBB87E7968311979B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-24_0190417304eb9e85a13103ab10620ee0_amadey_elex_rhadamanthys_smoke-loader_stop_urelas.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-09-24_0190417304eb9e85a13103ab10620ee0_amadey_elex_rhadamanthys_smoke-loader_stop_urelas
- Size 425KB
- SHA256 142758a4987c5840cd5c0e410936196ec782fe6945a1a811b05a68249c21e9fc
- MD5 0190417304eb9e85a13103ab10620ee0
- SHA1 324ffa2c48184e23c3f56c894f9fd66900c0f68e
- SHA512 c7fbad73c85cc31c1f879a19c49a4513a0779565530d6dbef2b16f18fefc31af3991e8dfb3da5ea141c78885443c7269d046343f2d22157439e7afe0231b96ef
- SSDEEP 6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOC9:oU7M5ijWh0XOW4sEfeOA
- TLSH T16C94CF263580C436F72907324406FAE40A65AC3E1AD5E54FFBB87E7968311979B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE