General
- Target 2026-11-03_89d3344f7206b0f8b36e0704a785f824_amadey_elex_karagany_rhadamanthys_smoke-loader_tofsee
- Size 384KB
- Sample261104-rz3fssxt7k
- SHA256 60f499fcb36fa6585ab3bcff16d31182b037e65d984a5fce30db12cb98f9db0a
- MD5 89d3344f7206b0f8b36e0704a785f824
- SHA1 1423e03aef4307c9c38c735f5638807768e2e321
- SHA512 5f97274be55f7ea63749b992b334de1b292becdace2f629fec33afb82b695759130d9865ff10052040fc39b1bf7ee65c1596788b639842287e26cbdb8abc5ffe
- SSDEEP 6144:ssa1jZVgy03se0kX1bewB1TY8BcA18rhyzypLZhF5D/e1M8p/Kbu:gtVgyusetedUfzeLl5DmMdbu
- TLSH T12F84BE2172408039F3690B3149A5E6F5186DAD3927A4E98FF7783E3A2E711C3567728F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-03_89d3344f7206b0f8b36e0704a785f824_amadey_elex_karagany_rhadamanthys_smoke-loader_tofsee.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-11-03_89d3344f7206b0f8b36e0704a785f824_amadey_elex_karagany_rhadamanthys_smoke-loader_tofsee
- Size 384KB
- SHA256 60f499fcb36fa6585ab3bcff16d31182b037e65d984a5fce30db12cb98f9db0a
- MD5 89d3344f7206b0f8b36e0704a785f824
- SHA1 1423e03aef4307c9c38c735f5638807768e2e321
- SHA512 5f97274be55f7ea63749b992b334de1b292becdace2f629fec33afb82b695759130d9865ff10052040fc39b1bf7ee65c1596788b639842287e26cbdb8abc5ffe
- SSDEEP 6144:ssa1jZVgy03se0kX1bewB1TY8BcA18rhyzypLZhF5D/e1M8p/Kbu:gtVgyusetedUfzeLl5DmMdbu
- TLSH T12F84BE2172408039F3690B3149A5E6F5186DAD3927A4E98FF7783E3A2E711C3567728F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE