General
- Target 2026-08-03_469ec7da6222641b3d9a14b885a6d04c_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 439KB
- Sample260804-pcwnmaej8z
- SHA256 91c1a588526dd871dcbd229c65690ae1a0cb763edb4b110a837a2095111fcc5a
- MD5 469ec7da6222641b3d9a14b885a6d04c
- SHA1 654d22188f1a3638022744b5c8cf07ad64fcfdc0
- SHA512 5b230c7652edc5d418f20e9a82e161030044ab70cf621ccefc8b4f045dbab303083d144487e8f6a708d890a5a95b89c0e417092ddb91b764d55d80e6ba1ab984
- SSDEEP 6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGS:rKf1PyKa2H3hOHOHz9JQ6zBk
- TLSH T1E2A4BE2572808435F76A0B3049A5E6E50868BC3927A9E58FF378BD3A2D701D35A7335F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_469ec7da6222641b3d9a14b885a6d04c_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-03_469ec7da6222641b3d9a14b885a6d04c_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 439KB
- SHA256 91c1a588526dd871dcbd229c65690ae1a0cb763edb4b110a837a2095111fcc5a
- MD5 469ec7da6222641b3d9a14b885a6d04c
- SHA1 654d22188f1a3638022744b5c8cf07ad64fcfdc0
- SHA512 5b230c7652edc5d418f20e9a82e161030044ab70cf621ccefc8b4f045dbab303083d144487e8f6a708d890a5a95b89c0e417092ddb91b764d55d80e6ba1ab984
- SSDEEP 6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGS:rKf1PyKa2H3hOHOHz9JQ6zBk
- TLSH T1E2A4BE2572808435F76A0B3049A5E6E50868BC3927A9E58FF378BD3A2D701D35A7335F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE