General
- Target 2026-07-28_1dff48ddd7deca78e4e4bc2b18fff75a_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 457KB
- Sample260729-b4pshasalc
- SHA256 d40f89fdac5edeabc5badeb4af81268b0042cb379a512ae77eaf03769e7daaa2
- MD5 1dff48ddd7deca78e4e4bc2b18fff75a
- SHA1 74a30a8120e913a5476f38f6fc32ef09f1b05767
- SHA512 136439ae143e8ffdaa201206c8a171cb1c101db3246ec43a31c32fed891deb98b4df9acc170e6c32106817da9465a97c7ef7e0d0f75abb893662641f463120b2
- SSDEEP 6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTWHXn:CMpASIcWYx2U6hAJQnj3n
- TLSH T1BFA4BD147640D476E31A0B310456EAB44AA96C3A17D9E48FF3383E766E312D3977B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_1dff48ddd7deca78e4e4bc2b18fff75a_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-07-28_1dff48ddd7deca78e4e4bc2b18fff75a_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 457KB
- SHA256 d40f89fdac5edeabc5badeb4af81268b0042cb379a512ae77eaf03769e7daaa2
- MD5 1dff48ddd7deca78e4e4bc2b18fff75a
- SHA1 74a30a8120e913a5476f38f6fc32ef09f1b05767
- SHA512 136439ae143e8ffdaa201206c8a171cb1c101db3246ec43a31c32fed891deb98b4df9acc170e6c32106817da9465a97c7ef7e0d0f75abb893662641f463120b2
- SSDEEP 6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTWHXn:CMpASIcWYx2U6hAJQnj3n
- TLSH T1BFA4BD147640D476E31A0B310456EAB44AA96C3A17D9E48FF3383E766E312D3977B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE