General
- Target 2026-06-08_f83cd41e87366a4609181135b371a215_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 594KB
- Sample260608-2wj56agy2m
- SHA256 9a199f73e7555495c9bf6ecf54a06479d9669264ca20b55f87a6619e7347f979
- MD5 f83cd41e87366a4609181135b371a215
- SHA1 c245bdf0df026f7ab34cf058df331964fae6642d
- SHA512 71b192412976216ae38c7015230722b9cd0327baef93323a69eef65d51d059532e1f2050450c0ca38c26424aa2a90983f80e0c26fc982a33e9c0b35d79377308
- SSDEEP 6144:8EK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFW:8MpASIcWYx2U6hAJQnl
- TLSH T1F6D494685828C8D6E795D534E82CEB1596F48CF17B8300ABB076F9FCD4B22D161AF50E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-08_f83cd41e87366a4609181135b371a215_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-06-08_f83cd41e87366a4609181135b371a215_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 594KB
- SHA256 9a199f73e7555495c9bf6ecf54a06479d9669264ca20b55f87a6619e7347f979
- MD5 f83cd41e87366a4609181135b371a215
- SHA1 c245bdf0df026f7ab34cf058df331964fae6642d
- SHA512 71b192412976216ae38c7015230722b9cd0327baef93323a69eef65d51d059532e1f2050450c0ca38c26424aa2a90983f80e0c26fc982a33e9c0b35d79377308
- SSDEEP 6144:8EK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFW:8MpASIcWYx2U6hAJQnl
- TLSH T1F6D494685828C8D6E795D534E82CEB1596F48CF17B8300ABB076F9FCD4B22D161AF50E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE