General
- Target 2026-06-27_5ff6af7fcd2e2e56d52da90cd94e0189_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 409KB
- Sample260629-hmrdbsg19l
- SHA256 308c874f1fca222e2b33e8f019b30dc6e93bb2fac02d32ef919781210f2aeeee
- MD5 5ff6af7fcd2e2e56d52da90cd94e0189
- SHA1 d5e1e131cf3f6a61205bce3cf5086b44b20d1f33
- SHA512 7db7c3e6ede56f965dfb5e159fceb4046eef235409c3276f36f3bb6092515e3f1541a4a2615bbccd70330f5c32a312649846fe56a8bbbd3b9274d09c11bf5e89
- SSDEEP 6144:Y5SXvBoDWoyLYyzbwOC4DYM6SB6v+qLnAzYmhwrxcvkzmSB7ohVW:YIfBoDWoyFbkU6hAJQnay
- TLSH T1A494BE253540C436F3290B354455EAB10AA9BC3A14D9E48FF778BE7A6D321938B7B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-27_5ff6af7fcd2e2e56d52da90cd94e0189_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-06-27_5ff6af7fcd2e2e56d52da90cd94e0189_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 409KB
- SHA256 308c874f1fca222e2b33e8f019b30dc6e93bb2fac02d32ef919781210f2aeeee
- MD5 5ff6af7fcd2e2e56d52da90cd94e0189
- SHA1 d5e1e131cf3f6a61205bce3cf5086b44b20d1f33
- SHA512 7db7c3e6ede56f965dfb5e159fceb4046eef235409c3276f36f3bb6092515e3f1541a4a2615bbccd70330f5c32a312649846fe56a8bbbd3b9274d09c11bf5e89
- SSDEEP 6144:Y5SXvBoDWoyLYyzbwOC4DYM6SB6v+qLnAzYmhwrxcvkzmSB7ohVW:YIfBoDWoyFbkU6hAJQnay
- TLSH T1A494BE253540C436F3290B354455EAB10AA9BC3A14D9E48FF778BE7A6D321938B7B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE