General
- Target 2026-11-02_fe77badca51387c8328cc5c59c982308_amadey_elex_karagany_rhadamanthys_smoke-loader_tofsee
- Size 384KB
- Sample261102-vph6ysvyby
- SHA256 198d4fae6426e3065f91e9869876503ca7ea3409362bc8191761a2e2cee05965
- MD5 fe77badca51387c8328cc5c59c982308
- SHA1 e62b43f25b609c7b976ca120e5fc160ccdc2f987
- SHA512 c5343b10f212fac100725415e20fa0eeeb079e9f143475c595d31971408230cecfd526bb74a1a3a1645e8f018987df40a9b28dfbeaed3b403ad7d1ba0e022867
- SSDEEP 6144:ssa1jZVgy03se0kX1bewB1TY8BcA18rhyzypLZhF5D/e1M8p/Kbd:gtVgyusetedUfzeLl5DmMdbd
- TLSH T1DA84BE2172408039F369073149A5E6F5186DAD3927A4E98FF7783E3A2E711C3567728F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-02_fe77badca51387c8328cc5c59c982308_amadey_elex_karagany_rhadamanthys_smoke-loader_tofsee.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-11-02_fe77badca51387c8328cc5c59c982308_amadey_elex_karagany_rhadamanthys_smoke-loader_tofsee
- Size 384KB
- SHA256 198d4fae6426e3065f91e9869876503ca7ea3409362bc8191761a2e2cee05965
- MD5 fe77badca51387c8328cc5c59c982308
- SHA1 e62b43f25b609c7b976ca120e5fc160ccdc2f987
- SHA512 c5343b10f212fac100725415e20fa0eeeb079e9f143475c595d31971408230cecfd526bb74a1a3a1645e8f018987df40a9b28dfbeaed3b403ad7d1ba0e022867
- SSDEEP 6144:ssa1jZVgy03se0kX1bewB1TY8BcA18rhyzypLZhF5D/e1M8p/Kbd:gtVgyusetedUfzeLl5DmMdbd
- TLSH T1DA84BE2172408039F369073149A5E6F5186DAD3927A4E98FF7783E3A2E711C3567728F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE