General
- Target 2026-08-04_2bddf880828f9f733d4e16e95dff17a7_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 401KB
- Sample260804-ttj4davbqa
- SHA256 826b70b83bd57a1c506e4fc9c984001c2298fe69734b5a8cbd9862a0331b8d19
- MD5 2bddf880828f9f733d4e16e95dff17a7
- SHA1 2b3150181f604cf861f540b3d9ae778a1d951260
- SHA512 c28d1a14ea410c3dcd8572027b3ecdc95c63fc74d371f0f5f86fb244755925f417309ad61b63c587320a8e697fe66e1a775e489a26c59c98b10379468b583a2b
- SSDEEP 6144:y5SXvBoDWoyLYyzbpPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrBwLTvd:yIfBoDWoyFboU6hAJQnro
- TLSH T14794BE253140C436F32A0B354456EAB049A9BC3915D9E48FF778BE7A5E311939B3B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_2bddf880828f9f733d4e16e95dff17a7_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-04_2bddf880828f9f733d4e16e95dff17a7_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 401KB
- SHA256 826b70b83bd57a1c506e4fc9c984001c2298fe69734b5a8cbd9862a0331b8d19
- MD5 2bddf880828f9f733d4e16e95dff17a7
- SHA1 2b3150181f604cf861f540b3d9ae778a1d951260
- SHA512 c28d1a14ea410c3dcd8572027b3ecdc95c63fc74d371f0f5f86fb244755925f417309ad61b63c587320a8e697fe66e1a775e489a26c59c98b10379468b583a2b
- SSDEEP 6144:y5SXvBoDWoyLYyzbpPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrBwLTvd:yIfBoDWoyFboU6hAJQnro
- TLSH T14794BE253140C436F32A0B354456EAB049A9BC3915D9E48FF778BE7A5E311939B3B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE