General
- Target 2026-05-31_028d475486fadab662ed7fb8f0bbb461_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 401KB
- Sample260531-e57aqahv31
- SHA256 b8e903169b517ab960712974d9cffa8497d4bc24c6ee0bc8f755ac291235a40c
- MD5 028d475486fadab662ed7fb8f0bbb461
- SHA1 100d8a32cf48c3c07e6fc4e605887992d7309e8c
- SHA512 f0c02695c9046770eb8705038653ef5245a1eee0ecef8493bc3647fb8bf9f6f7799315c9fb436eaa3bceba8d37269729f51b27e8230fbe7d9172aa66a0bd7920
- SSDEEP 6144:y5SXvBoDWoyLYyzbpPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrBwLTvX:yIfBoDWoyFboU6hAJQnra
- TLSH T19694BD253140C436F32A0B354456EAB149A9BC3915D9E48FF778BE7A5E311938B3B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-31_028d475486fadab662ed7fb8f0bbb461_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-05-31_028d475486fadab662ed7fb8f0bbb461_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 401KB
- SHA256 b8e903169b517ab960712974d9cffa8497d4bc24c6ee0bc8f755ac291235a40c
- MD5 028d475486fadab662ed7fb8f0bbb461
- SHA1 100d8a32cf48c3c07e6fc4e605887992d7309e8c
- SHA512 f0c02695c9046770eb8705038653ef5245a1eee0ecef8493bc3647fb8bf9f6f7799315c9fb436eaa3bceba8d37269729f51b27e8230fbe7d9172aa66a0bd7920
- SSDEEP 6144:y5SXvBoDWoyLYyzbpPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrBwLTvX:yIfBoDWoyFboU6hAJQnra
- TLSH T19694BD253140C436F32A0B354456EAB149A9BC3915D9E48FF778BE7A5E311938B3B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE