General
- Target 2026-07-28_67abcb656d0e6846563d509caa1e91da_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 457KB
- Sample260728-zebfksvgnc
- SHA256 cf5828b50d54e0293dd26b8bb2040c97646e78c79ef5b816d3e909ca7a25f620
- MD5 67abcb656d0e6846563d509caa1e91da
- SHA1 317992a37c25413d87976175cd967bbefb227931
- SHA512 b82214b3316bc473e0aa9aeea9e0cc438ad2e46927aac69a4a26f80743746d7f37b60c72021107890826aa10a54126b5416d169312b81fcc5148e4861bcb61ac
- SSDEEP 6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTWHXX:CMpASIcWYx2U6hAJQnj3X
- TLSH T175A4BD147640D476E31A0B310456EAB44AA96C3A17D9E48FF3383E766E312D3977B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_67abcb656d0e6846563d509caa1e91da_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-07-28_67abcb656d0e6846563d509caa1e91da_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 457KB
- SHA256 cf5828b50d54e0293dd26b8bb2040c97646e78c79ef5b816d3e909ca7a25f620
- MD5 67abcb656d0e6846563d509caa1e91da
- SHA1 317992a37c25413d87976175cd967bbefb227931
- SHA512 b82214b3316bc473e0aa9aeea9e0cc438ad2e46927aac69a4a26f80743746d7f37b60c72021107890826aa10a54126b5416d169312b81fcc5148e4861bcb61ac
- SSDEEP 6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTWHXX:CMpASIcWYx2U6hAJQnj3X
- TLSH T175A4BD147640D476E31A0B310456EAB44AA96C3A17D9E48FF3383E766E312D3977B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE