General
- Target 2026-09-30_a12e3e3ab48edc330a38619b3e00ff40_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 353KB
- Sample260930-k155ra11bx
- SHA256 13aaeca6c5ea86193820d64bbbaacf4601692a21848903a08a1b0fc5090f13b8
- MD5 a12e3e3ab48edc330a38619b3e00ff40
- SHA1 894ce86506ade1c3cd42145db2eceef16de89a74
- SHA512 56e7154c1f40cd097b7b918ba84412a58f356614e7e5322ac78218c85e0dc1c23a3d7a132e7eccb58e99721e9d63afa827938c78fa3c60e57cc4f859556157b1
- SSDEEP 3072:wdXi+V5Kgxpdxj8gbib20xTyst542t8ZHWBow8+zoB91wDKCZN:wd7rpL43btmQ58Z27zw3eZN
- TLSH T1CE748D253580C475F32A07314446EAF00A66BC391A99E54FFBB8BD79AD311978B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-30_a12e3e3ab48edc330a38619b3e00ff40_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-09-30_a12e3e3ab48edc330a38619b3e00ff40_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 353KB
- SHA256 13aaeca6c5ea86193820d64bbbaacf4601692a21848903a08a1b0fc5090f13b8
- MD5 a12e3e3ab48edc330a38619b3e00ff40
- SHA1 894ce86506ade1c3cd42145db2eceef16de89a74
- SHA512 56e7154c1f40cd097b7b918ba84412a58f356614e7e5322ac78218c85e0dc1c23a3d7a132e7eccb58e99721e9d63afa827938c78fa3c60e57cc4f859556157b1
- SSDEEP 3072:wdXi+V5Kgxpdxj8gbib20xTyst542t8ZHWBow8+zoB91wDKCZN:wd7rpL43btmQ58Z27zw3eZN
- TLSH T1CE748D253580C475F32A07314446EAF00A66BC391A99E54FFBB8BD79AD311978B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE