General
- Target 2026-08-01_6af2ac1cec2efacfa5e955356bf9bb87_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 409KB
- Sample260801-fs7w6aycqa
- SHA256 5418ffb2f7d9ed1dcf65f4790e7b1461de155c2c08cae1d288c05e4f57054b1a
- MD5 6af2ac1cec2efacfa5e955356bf9bb87
- SHA1 34b58e6bfa690dc31a295a42d6f93c9086ee6da6
- SHA512 1364237bf431272026fc14440509d0db5609f240209bcfcf669ccbc9055d72a85dc41207603913fdd8d126f8dc480c14f4f0d8d289fc6dbb3bc76db54e94a25a
- SSDEEP 6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohp0:8IfBoDWoyFblU6hAJQnOQ
- TLSH T10A94BE253140C436F3290B354456EAB14AA9BC3915D9E48FF778BE7A6E311938B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-01_6af2ac1cec2efacfa5e955356bf9bb87_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-01_6af2ac1cec2efacfa5e955356bf9bb87_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 409KB
- SHA256 5418ffb2f7d9ed1dcf65f4790e7b1461de155c2c08cae1d288c05e4f57054b1a
- MD5 6af2ac1cec2efacfa5e955356bf9bb87
- SHA1 34b58e6bfa690dc31a295a42d6f93c9086ee6da6
- SHA512 1364237bf431272026fc14440509d0db5609f240209bcfcf669ccbc9055d72a85dc41207603913fdd8d126f8dc480c14f4f0d8d289fc6dbb3bc76db54e94a25a
- SSDEEP 6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohp0:8IfBoDWoyFblU6hAJQnOQ
- TLSH T10A94BE253140C436F3290B354456EAB14AA9BC3915D9E48FF778BE7A6E311938B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE