General
- Target 2026-11-03_b4585b949289e6bb2fe3d6874c73c700_amadey_elex_karagany_rhadamanthys_smoke-loader_tofsee
- Size 384KB
- Sample261104-l9ql4azzcv
- SHA256 e4d83a19c3f84379e2ab401152c747f79cf0c7f927daa80b69b0d5a361467462
- MD5 b4585b949289e6bb2fe3d6874c73c700
- SHA1 a4a7b1136456eb8f91ba18f1d5c1cf65e361ab94
- SHA512 a1a7fdc6a762d225edb5ed48a8f6289c45fc77934318c4c6fdd4c0c192fa59a6fc8f75a9f1ebc8cf0733bba292f09a581950a13281a3e70423b4288062b7b62f
- SSDEEP 6144:ssa1jZVgy03se0kX1bewB1TY8BcA18rhyzypLZhF5D/e1M8p/Kbi:gtVgyusetedUfzeLl5DmMdbi
- TLSH T12C84BE2172408039F369073149A5E6F5186DAD3927A8E98FF7783E3A2E711C3567728F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-03_b4585b949289e6bb2fe3d6874c73c700_amadey_elex_karagany_rhadamanthys_smoke-loader_tofsee.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-11-03_b4585b949289e6bb2fe3d6874c73c700_amadey_elex_karagany_rhadamanthys_smoke-loader_tofsee
- Size 384KB
- SHA256 e4d83a19c3f84379e2ab401152c747f79cf0c7f927daa80b69b0d5a361467462
- MD5 b4585b949289e6bb2fe3d6874c73c700
- SHA1 a4a7b1136456eb8f91ba18f1d5c1cf65e361ab94
- SHA512 a1a7fdc6a762d225edb5ed48a8f6289c45fc77934318c4c6fdd4c0c192fa59a6fc8f75a9f1ebc8cf0733bba292f09a581950a13281a3e70423b4288062b7b62f
- SSDEEP 6144:ssa1jZVgy03se0kX1bewB1TY8BcA18rhyzypLZhF5D/e1M8p/Kbi:gtVgyusetedUfzeLl5DmMdbi
- TLSH T12C84BE2172408039F369073149A5E6F5186DAD3927A8E98FF7783E3A2E711C3567728F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE