General
- Target 2026-11-04_eddada5436753e86df784685dc95886c_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 595KB
- Sample261105-g28eqaav4p
- SHA256 8fe3fa6a6b2c2d49e465dc0923178febe340e3ef387eb7546807371dd09a3f0f
- MD5 eddada5436753e86df784685dc95886c
- SHA1 0b6369bbc27739201fae9c531332b0eab2c25c96
- SHA512 d97097e2b6596d0f34dc7d82bb603914017f42fc3af0a47113539efb0e5cda6df51dd60917e5e9ffa5ff9639c152c761ae4996ed70559535226cb7c796f6df3c
- SSDEEP 6144:KzU7blKaPcbhj+bB7ktZeRnVDJm0oNjOPdInpBI:MU7MLb4BQkntwNjqdd
- TLSH T180D4CF263580C436F72A07364442E6E00AA5AC3D19D9E54FF7B87E7969311A78B3B34F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-04_eddada5436753e86df784685dc95886c_amadey_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-04_eddada5436753e86df784685dc95886c_amadey_elex_rhadamanthys_smoke-loader_stop
- Size 595KB
- SHA256 8fe3fa6a6b2c2d49e465dc0923178febe340e3ef387eb7546807371dd09a3f0f
- MD5 eddada5436753e86df784685dc95886c
- SHA1 0b6369bbc27739201fae9c531332b0eab2c25c96
- SHA512 d97097e2b6596d0f34dc7d82bb603914017f42fc3af0a47113539efb0e5cda6df51dd60917e5e9ffa5ff9639c152c761ae4996ed70559535226cb7c796f6df3c
- SSDEEP 6144:KzU7blKaPcbhj+bB7ktZeRnVDJm0oNjOPdInpBI:MU7MLb4BQkntwNjqdd
- TLSH T180D4CF263580C436F72A07364442E6E00AA5AC3D19D9E54FF7B87E7969311A78B3B34F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE