General
- Target 2026-08-06_0a5f14be34419d45775c768a13061a53_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 439KB
- Sample260806-1venlsbk6t
- SHA256 7a86694e2df10ff0f14816624f7ddc3dad5a17939f7cb40428ef8149c0d925b5
- MD5 0a5f14be34419d45775c768a13061a53
- SHA1 f2bd177dbb316040abc8879949dddc0adf6908df
- SHA512 48fd73a395a0c03e73be20a8990a07a8a2e08067dd236a4acc9c699cdcffaea898885adbd5fa5016c0c676e1ccb552aa72d7896b55bdb046fed7959dda9b0f09
- SSDEEP 6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGp:rKf1PyKa2H3hOHOHz9JQ6zB/
- TLSH T165A4BE2572808435F76A0B3049A5E6E50868BC3927A9E58FF378BD3A2D701D35A7335F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-06_0a5f14be34419d45775c768a13061a53_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-06_0a5f14be34419d45775c768a13061a53_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 439KB
- SHA256 7a86694e2df10ff0f14816624f7ddc3dad5a17939f7cb40428ef8149c0d925b5
- MD5 0a5f14be34419d45775c768a13061a53
- SHA1 f2bd177dbb316040abc8879949dddc0adf6908df
- SHA512 48fd73a395a0c03e73be20a8990a07a8a2e08067dd236a4acc9c699cdcffaea898885adbd5fa5016c0c676e1ccb552aa72d7896b55bdb046fed7959dda9b0f09
- SSDEEP 6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGp:rKf1PyKa2H3hOHOHz9JQ6zB/
- TLSH T165A4BE2572808435F76A0B3049A5E6E50868BC3927A9E58FF378BD3A2D701D35A7335F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE