General
- Target 2026-07-22_bbbf97e0ea6d7b0a8b0ee68f6a39dfbc_amadey_elex_lumma-stealer_rhadamanthys_smoke-loader_stop
- Size 49.2MB
- Sample260722-vnv45azbkh
- SHA256 3228e9977a379927013422db129fe1bef041b70235064d8cf05e98d7c5f0eb1b
- MD5 bbbf97e0ea6d7b0a8b0ee68f6a39dfbc
- SHA1 51b398661c799b1b1a5a6c044ca9b6b9b0ebc7d7
- SHA512 167416a0a0ff58f047a3c3506321f433cfa366596d088cec614d324b0201d1ecde300c43fbc736792f392f3c68ec59fca171f0fb287bf143c33638430155b996
- SSDEEP 1572864:gsNLOlAhPKL1k1LZxgCrwK8qSNzhUpHTF:g9oKL1k1LUhUpx
- TLSH T102B733133E94D1B2EA310CF0CBDFDA5512135F18AB4687A771DDBA8E2D6A84126F5383
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_bbbf97e0ea6d7b0a8b0ee68f6a39dfbc_amadey_elex_lumma-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_bbbf97e0ea6d7b0a8b0ee68f6a39dfbc_amadey_elex_lumma-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_bbbf97e0ea6d7b0a8b0ee68f6a39dfbc_amadey_elex_lumma-stealer_rhadamanthys_smoke-loader_stop
- Size 49.2MB
- SHA256 3228e9977a379927013422db129fe1bef041b70235064d8cf05e98d7c5f0eb1b
- MD5 bbbf97e0ea6d7b0a8b0ee68f6a39dfbc
- SHA1 51b398661c799b1b1a5a6c044ca9b6b9b0ebc7d7
- SHA512 167416a0a0ff58f047a3c3506321f433cfa366596d088cec614d324b0201d1ecde300c43fbc736792f392f3c68ec59fca171f0fb287bf143c33638430155b996
- SSDEEP 1572864:gsNLOlAhPKL1k1LZxgCrwK8qSNzhUpHTF:g9oKL1k1LUhUpx
- TLSH T102B733133E94D1B2EA310CF0CBDFDA5512135F18AB4687A771DDBA8E2D6A84126F5383
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled