General
- Target 2026-05-01_554a18c59902270ba16c17eb5081348d_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 401KB
- Sample260501-13b8fset7v
- SHA256 44154752ce055edd9ec330f55dbe6ae993ac9130c324a717d2667d63c5d20884
- MD5 554a18c59902270ba16c17eb5081348d
- SHA1 8659eff1be550c533b3da49fc596f750907a1225
- SHA512 25af91e9edabb78c479a54dee4c67a817d9d03cc6b8e0543a9defa21720191c0dccb4d5588d16ffa0321e8ec4deea6589318608d68102d8e2fdfdd830fe5e4ab
- SSDEEP 6144:y5SXvBoDWoyLYyzbpPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrBwLTvbL:yIfBoDWoyFboU6hAJQnru
- TLSH T10F94BD253140C436F32A0B354456EAB149A9BC3915D9E48FF778BE7A5E311938B3B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-01_554a18c59902270ba16c17eb5081348d_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-05-01_554a18c59902270ba16c17eb5081348d_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 401KB
- SHA256 44154752ce055edd9ec330f55dbe6ae993ac9130c324a717d2667d63c5d20884
- MD5 554a18c59902270ba16c17eb5081348d
- SHA1 8659eff1be550c533b3da49fc596f750907a1225
- SHA512 25af91e9edabb78c479a54dee4c67a817d9d03cc6b8e0543a9defa21720191c0dccb4d5588d16ffa0321e8ec4deea6589318608d68102d8e2fdfdd830fe5e4ab
- SSDEEP 6144:y5SXvBoDWoyLYyzbpPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrBwLTvbL:yIfBoDWoyFboU6hAJQnru
- TLSH T10F94BD253140C436F32A0B354456EAB149A9BC3915D9E48FF778BE7A5E311938B3B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE