General
- Target 2026-11-01_f9b9098973858f1c66c5580e7d29b5a5_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 595KB
- Sample261102-cttt5set7v
- SHA256 269ed8d573a06343652e7696def78f33b88afaacd5a08237f04149010976c599
- MD5 f9b9098973858f1c66c5580e7d29b5a5
- SHA1 820ab374de61e3a0d6e7feb5331dbecebe543316
- SHA512 704c16865c038e4a07eb13cccda0221345e288912f934c0ca54553850bf84860eaf51c4c4fa59804081053cfab40c7f68a754be043bb41f063d6a4c7076f2c47
- SSDEEP 6144:KzU7blKaPcbhj+bB7ktZeRnVDJm0oNjOPdInpB+:MU7MLb4BQkntwNjqdH
- TLSH T166D4CF263580C436F72A07364442E6F00AA5AC3D19D9E54FF7B87E7969311A78B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_f9b9098973858f1c66c5580e7d29b5a5_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-01_f9b9098973858f1c66c5580e7d29b5a5_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 595KB
- SHA256 269ed8d573a06343652e7696def78f33b88afaacd5a08237f04149010976c599
- MD5 f9b9098973858f1c66c5580e7d29b5a5
- SHA1 820ab374de61e3a0d6e7feb5331dbecebe543316
- SHA512 704c16865c038e4a07eb13cccda0221345e288912f934c0ca54553850bf84860eaf51c4c4fa59804081053cfab40c7f68a754be043bb41f063d6a4c7076f2c47
- SSDEEP 6144:KzU7blKaPcbhj+bB7ktZeRnVDJm0oNjOPdInpB+:MU7MLb4BQkntwNjqdH
- TLSH T166D4CF263580C436F72A07364442E6F00AA5AC3D19D9E54FF7B87E7969311A78B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE