General
- Target 2026-08-05_72f3f679bc77583fce61b04ed98b2f0b_amadey_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 3.1MB
- Sample260805-m5k2gswclf
- SHA256 012f08f8f06123b202de2b699e6c49f24d7c1a504811dcf91ef82e87859baae7
- MD5 72f3f679bc77583fce61b04ed98b2f0b
- SHA1 0e98727221b8f37a088ad2cf605ec2ccc8da335b
- SHA512 f45055e04a45ee85c99057dfcb9c0acee2e84ffd06159d231339c22f8eee21426698f5fdd2135086f68ca4a54aaf42aa8d6c5ab270092f73eb43bdc93ac442f4
- SSDEEP 98304:cFYUN4i9r3Lr2vcBNGTY8Lx9XU0Vkfqy3m5kiTxlc5Q:8lPHWTY8LDXtoN2t
- TLSH T1B6E522857983C876E163137644C1B234A33E6CE15FAB859727907F78BE322DE473624A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_72f3f679bc77583fce61b04ed98b2f0b_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_72f3f679bc77583fce61b04ed98b2f0b_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_72f3f679bc77583fce61b04ed98b2f0b_amadey_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 3.1MB
- SHA256 012f08f8f06123b202de2b699e6c49f24d7c1a504811dcf91ef82e87859baae7
- MD5 72f3f679bc77583fce61b04ed98b2f0b
- SHA1 0e98727221b8f37a088ad2cf605ec2ccc8da335b
- SHA512 f45055e04a45ee85c99057dfcb9c0acee2e84ffd06159d231339c22f8eee21426698f5fdd2135086f68ca4a54aaf42aa8d6c5ab270092f73eb43bdc93ac442f4
- SSDEEP 98304:cFYUN4i9r3Lr2vcBNGTY8Lx9XU0Vkfqy3m5kiTxlc5Q:8lPHWTY8LDXtoN2t
- TLSH T1B6E522857983C876E163137644C1B234A33E6CE15FAB859727907F78BE322DE473624A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL