General
- Target 2026-08-05_9e725431ff2ef54bde4acb107144bead_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 441KB
- Sample260805-m1j9dswbmd
- SHA256 f344d5b2974089302cd477e09b50abc24ab96b177c8c25b80d38a0dc5e7f90ef
- MD5 9e725431ff2ef54bde4acb107144bead
- SHA1 b743a3a225d3acf86de6730863fa235a0b2301e1
- SHA512 78761380f95e2ab96e9dcccb3a7dccdaf6fa17dd2307b3885f7ee66f43e2dacbfef5dc5fc6501ce40b0ea7998d0b579da6c91d7ea9177828aadc89c291d0c5e3
- SSDEEP 6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGG/k:rKf1PyKa2H3hOHOHz9JQ6zBq
- TLSH T1B1A4AE2572808435F76A0B3049A5E6E50868BC392BA5E58FF368BD3A2D701D35A7335F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_9e725431ff2ef54bde4acb107144bead_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-05_9e725431ff2ef54bde4acb107144bead_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 441KB
- SHA256 f344d5b2974089302cd477e09b50abc24ab96b177c8c25b80d38a0dc5e7f90ef
- MD5 9e725431ff2ef54bde4acb107144bead
- SHA1 b743a3a225d3acf86de6730863fa235a0b2301e1
- SHA512 78761380f95e2ab96e9dcccb3a7dccdaf6fa17dd2307b3885f7ee66f43e2dacbfef5dc5fc6501ce40b0ea7998d0b579da6c91d7ea9177828aadc89c291d0c5e3
- SSDEEP 6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGG/k:rKf1PyKa2H3hOHOHz9JQ6zBq
- TLSH T1B1A4AE2572808435F76A0B3049A5E6E50868BC392BA5E58FF368BD3A2D701D35A7335F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE