General
- Target 2026-04-15_c5e8388dc240efdd2ea7801ed98f7378_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 594KB
- Sample260415-n6c8psds3k
- SHA256 76216ed3763e659b64122bbee1075d103b6ad5d450386461dd6099c2795b533b
- MD5 c5e8388dc240efdd2ea7801ed98f7378
- SHA1 d407f644878d82d204285e9917b80f3c26fbf5af
- SHA512 0bb32050acf4e562024dd369cd6922fed0dc505d012006a0294924d35e1e99b6f3ee71e6c16c679d3babbfbfa25789611cad07f9e64a726cc75f7cbeca6fa595
- SSDEEP 6144:8EK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFk:8MpASIcWYx2U6hAJQnl
- TLSH T130D494685828C8D6E795D534E82CEB1596F48CF17B8300ABB076F9FCD4B22D161AF50E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-15_c5e8388dc240efdd2ea7801ed98f7378_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-04-15_c5e8388dc240efdd2ea7801ed98f7378_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 594KB
- SHA256 76216ed3763e659b64122bbee1075d103b6ad5d450386461dd6099c2795b533b
- MD5 c5e8388dc240efdd2ea7801ed98f7378
- SHA1 d407f644878d82d204285e9917b80f3c26fbf5af
- SHA512 0bb32050acf4e562024dd369cd6922fed0dc505d012006a0294924d35e1e99b6f3ee71e6c16c679d3babbfbfa25789611cad07f9e64a726cc75f7cbeca6fa595
- SSDEEP 6144:8EK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFk:8MpASIcWYx2U6hAJQnl
- TLSH T130D494685828C8D6E795D534E82CEB1596F48CF17B8300ABB076F9FCD4B22D161AF50E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE