General
- Target 2026-09-30_96ec0fd6e36e632cc837482ff2ae7b94_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 353KB
- Sample260930-ldx2ass14p
- SHA256 3fa128c4a8d0121fe80ad975536f08b86eaa1400d9df05224f2ff55294d0b64a
- MD5 96ec0fd6e36e632cc837482ff2ae7b94
- SHA1 41a514dc142fa90417da54c101739b7f646e0a14
- SHA512 e10c6d97b19edff2eb0cf80f3d5c3c514640a4dfb3f05fc0d9640c8df6e42f387017f8641f63b32f891231e7b4bb7c7e21e3139db0e862469d9ca51b01e58aae
- SSDEEP 3072:wdXi+V5Kgxpdxj8gbib20xTyst542t8ZHWBow8+zoB91wDKCZ2:wd7rpL43btmQ58Z27zw3eZ2
- TLSH T1F8748D253580C475F32A07314446EAF00A66BC391A99E54FFBB8BD79AD311978B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-30_96ec0fd6e36e632cc837482ff2ae7b94_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-09-30_96ec0fd6e36e632cc837482ff2ae7b94_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 353KB
- SHA256 3fa128c4a8d0121fe80ad975536f08b86eaa1400d9df05224f2ff55294d0b64a
- MD5 96ec0fd6e36e632cc837482ff2ae7b94
- SHA1 41a514dc142fa90417da54c101739b7f646e0a14
- SHA512 e10c6d97b19edff2eb0cf80f3d5c3c514640a4dfb3f05fc0d9640c8df6e42f387017f8641f63b32f891231e7b4bb7c7e21e3139db0e862469d9ca51b01e58aae
- SSDEEP 3072:wdXi+V5Kgxpdxj8gbib20xTyst542t8ZHWBow8+zoB91wDKCZ2:wd7rpL43btmQ58Z27zw3eZ2
- TLSH T1F8748D253580C475F32A07314446EAF00A66BC391A99E54FFBB8BD79AD311978B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE