General
- Target 2026-06-26_294ecb141f86071692dfe9fec0271190_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 402KB
- Sample260629-vx364acs8p
- SHA256 e8901e346603bc8bf2f4a961659fe928fd8eb6f8e00603d27884f91d82c9095e
- MD5 294ecb141f86071692dfe9fec0271190
- SHA1 e778fbf11788e9bfffaf7f1559717cd84a071e1d
- SHA512 f09a04d7e5bb096b3d21f0401ac22932d7e3ee013d9cbf93ad4899c02fe84783336bb036ae41119400f7ee8740044549c94162a71b35ea602306d4ce70026422
- SSDEEP 6144:y5SXvBoDWoyLYyzbpPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrBwLTvp:yIfBoDWoyFboU6hAJQnrK
- TLSH T1C594BD253140C436F32A0B354456EAB149A9BC3915D9E48FF778BE7A5E311938B3B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-26_294ecb141f86071692dfe9fec0271190_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-06-26_294ecb141f86071692dfe9fec0271190_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 402KB
- SHA256 e8901e346603bc8bf2f4a961659fe928fd8eb6f8e00603d27884f91d82c9095e
- MD5 294ecb141f86071692dfe9fec0271190
- SHA1 e778fbf11788e9bfffaf7f1559717cd84a071e1d
- SHA512 f09a04d7e5bb096b3d21f0401ac22932d7e3ee013d9cbf93ad4899c02fe84783336bb036ae41119400f7ee8740044549c94162a71b35ea602306d4ce70026422
- SSDEEP 6144:y5SXvBoDWoyLYyzbpPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrBwLTvp:yIfBoDWoyFboU6hAJQnrK
- TLSH T1C594BD253140C436F32A0B354456EAB149A9BC3915D9E48FF778BE7A5E311938B3B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE