General
- Target 2026-08-07_bb443bad436df0d9199c7142771a4a2c_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 439KB
- Sample260807-ebgg7sfm2x
- SHA256 289ac48116543078bd8b9af766a33077aedd01e453da31f11dead24dea7ebc60
- MD5 bb443bad436df0d9199c7142771a4a2c
- SHA1 84c371423c6554f56fcc6516e186e47e23ad5769
- SHA512 e41b374bf86b36f634d5b62d5e17578d8429044342bb07f080a2ef300ab9a50332081dbd13882f37e8a1f03983ac8b29720eb27e1e881bf3129a37da44490d4f
- SSDEEP 6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGx:rKf1PyKa2H3hOHOHz9JQ6zBn
- TLSH T154A4BE2572808435F76A0B3049A5E6E50868BC3927A9E58FF378BD3A2D701D35A7335F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-07_bb443bad436df0d9199c7142771a4a2c_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-07_bb443bad436df0d9199c7142771a4a2c_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 439KB
- SHA256 289ac48116543078bd8b9af766a33077aedd01e453da31f11dead24dea7ebc60
- MD5 bb443bad436df0d9199c7142771a4a2c
- SHA1 84c371423c6554f56fcc6516e186e47e23ad5769
- SHA512 e41b374bf86b36f634d5b62d5e17578d8429044342bb07f080a2ef300ab9a50332081dbd13882f37e8a1f03983ac8b29720eb27e1e881bf3129a37da44490d4f
- SSDEEP 6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGx:rKf1PyKa2H3hOHOHz9JQ6zBn
- TLSH T154A4BE2572808435F76A0B3049A5E6E50868BC3927A9E58FF378BD3A2D701D35A7335F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE