General
- Target 2026-08-01_a60c47577ecf9cb4a0ab80b261a12755_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 409KB
- Sample260801-fg5bwsv1fs
- SHA256 00336327047552690fc0d2e0320208427eb3f4f4e17527b165258dc2e10806a8
- MD5 a60c47577ecf9cb4a0ab80b261a12755
- SHA1 cc288ae58ef00ca072c52a9cc501b5abacfa1a61
- SHA512 7e0816294d2ca641be2120f31d32806df9716c0476a65dc59e1485ddd3f7ef28f7d8416d2f6fa31fff770692c0dc35c5b5803c8ed58f9bf77a98063d75eca69b
- SSDEEP 6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohpg:8IfBoDWoyFblU6hAJQnOc
- TLSH T10D94BE253140C436F3290B354456EAB14AA9BC3915D9E48FF778BE7A6E311938B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-01_a60c47577ecf9cb4a0ab80b261a12755_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-01_a60c47577ecf9cb4a0ab80b261a12755_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 409KB
- SHA256 00336327047552690fc0d2e0320208427eb3f4f4e17527b165258dc2e10806a8
- MD5 a60c47577ecf9cb4a0ab80b261a12755
- SHA1 cc288ae58ef00ca072c52a9cc501b5abacfa1a61
- SHA512 7e0816294d2ca641be2120f31d32806df9716c0476a65dc59e1485ddd3f7ef28f7d8416d2f6fa31fff770692c0dc35c5b5803c8ed58f9bf77a98063d75eca69b
- SSDEEP 6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohpg:8IfBoDWoyFblU6hAJQnOc
- TLSH T10D94BE253140C436F3290B354456EAB14AA9BC3915D9E48FF778BE7A6E311938B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE