General
- Target 2026-08-05_f4fcce5e6019c5e485088a11ad3b8212_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 410KB
- Sample260805-3pz4gaee83
- SHA256 fe00e05cefac7dcac2fdfdc9f2dd47a05abad693d73903b55dc977b8830305bd
- MD5 f4fcce5e6019c5e485088a11ad3b8212
- SHA1 e87a67abac10cd1c22847f51714d99d4fc05f162
- SHA512 b01f9f9588a06a04a95bd0fdd680bffb969319195bd89093fefb1a7aa8b8eb0713d9c544bb117f902d8cffca541fc743116e66dc71bbc1db82df15cd9ece3440
- SSDEEP 6144:Y5SXvBoDWoyLYyzbwOC4DYM6SB6v+qLnAzYmhwrxcvkzmSB7ohV3:YIfBoDWoyFbkU6hAJQnaz
- TLSH T16394BE253540C436F3290B354455EAB10AA9BC3A14D9E48FF7787E7A6D321939B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_f4fcce5e6019c5e485088a11ad3b8212_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-05_f4fcce5e6019c5e485088a11ad3b8212_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 410KB
- SHA256 fe00e05cefac7dcac2fdfdc9f2dd47a05abad693d73903b55dc977b8830305bd
- MD5 f4fcce5e6019c5e485088a11ad3b8212
- SHA1 e87a67abac10cd1c22847f51714d99d4fc05f162
- SHA512 b01f9f9588a06a04a95bd0fdd680bffb969319195bd89093fefb1a7aa8b8eb0713d9c544bb117f902d8cffca541fc743116e66dc71bbc1db82df15cd9ece3440
- SSDEEP 6144:Y5SXvBoDWoyLYyzbwOC4DYM6SB6v+qLnAzYmhwrxcvkzmSB7ohV3:YIfBoDWoyFbkU6hAJQnaz
- TLSH T16394BE253540C436F3290B354455EAB10AA9BC3A14D9E48FF7787E7A6D321939B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE