General
- Target 2026-06-02_ee55bb5d3eaea92f61ae777a0b6dc455_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 534KB
- Sample260602-txlrdabw8m
- SHA256 c29737fa79b7ad2c80068a4307d8caf22e9b31e3824826f58cec1ab0cc90fa58
- MD5 ee55bb5d3eaea92f61ae777a0b6dc455
- SHA1 083e5595b19729e153dc08de6803ee6a2cb44fe2
- SHA512 5bdfb3b266d1823b51f54dc4f13af363d6d91c45183a8644a2d93005a227a1f4d884d207dbf120a1da656e391773e76ec4e4c98d796c1bd98b80c982ebf371a1
- SSDEEP 6144:FEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpLweWPnFQBaP5r:FMpASIcWYx2U6hAJQnvlGUPx
- TLSH T17EC4D01A76408672E35607711516E6E16A29AC3913E9D4CFF23C7D3E2A322D3537B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-02_ee55bb5d3eaea92f61ae777a0b6dc455_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-06-02_ee55bb5d3eaea92f61ae777a0b6dc455_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 534KB
- SHA256 c29737fa79b7ad2c80068a4307d8caf22e9b31e3824826f58cec1ab0cc90fa58
- MD5 ee55bb5d3eaea92f61ae777a0b6dc455
- SHA1 083e5595b19729e153dc08de6803ee6a2cb44fe2
- SHA512 5bdfb3b266d1823b51f54dc4f13af363d6d91c45183a8644a2d93005a227a1f4d884d207dbf120a1da656e391773e76ec4e4c98d796c1bd98b80c982ebf371a1
- SSDEEP 6144:FEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpLweWPnFQBaP5r:FMpASIcWYx2U6hAJQnvlGUPx
- TLSH T17EC4D01A76408672E35607711516E6E16A29AC3913E9D4CFF23C7D3E2A322D3537B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE