General
- Target 2026-11-01_d7674fdbf9b2488fa7bbc9c45770b72c_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 634KB
- Sample261102-h3g5laed68
- SHA256 dd3c5b98a5004700c008e72621a2c7c23f31b42ab1a0cc56f84a3bf2dbf7a221
- MD5 d7674fdbf9b2488fa7bbc9c45770b72c
- SHA1 8c8847bff4e86b089585dd564221768d12124b39
- SHA512 e35176545b666361f618e6d9a9720149e4f937264d410d1d1f66f9ca16261b47d19b97b5ca8f424633444a6908aa7e97a022141e8b6a48391cf011b473ac6fe9
- SSDEEP 12288:RU7M5ijWh0XOW4sEf9OTijWh0XOW4sEfsS:RUowYcOW4a2YcOW4d
- TLSH T113D4DF1636408475F7290B321806FAE40AA9AD3D1AD4F54FF67CBE7968320979B3724F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_d7674fdbf9b2488fa7bbc9c45770b72c_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-01_d7674fdbf9b2488fa7bbc9c45770b72c_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 634KB
- SHA256 dd3c5b98a5004700c008e72621a2c7c23f31b42ab1a0cc56f84a3bf2dbf7a221
- MD5 d7674fdbf9b2488fa7bbc9c45770b72c
- SHA1 8c8847bff4e86b089585dd564221768d12124b39
- SHA512 e35176545b666361f618e6d9a9720149e4f937264d410d1d1f66f9ca16261b47d19b97b5ca8f424633444a6908aa7e97a022141e8b6a48391cf011b473ac6fe9
- SSDEEP 12288:RU7M5ijWh0XOW4sEf9OTijWh0XOW4sEfsS:RUowYcOW4a2YcOW4d
- TLSH T113D4DF1636408475F7290B321806FAE40AA9AD3D1AD4F54FF67CBE7968320979B3724F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE