General
- Target 2026-08-08_5dbe625034bada869373630dc02361d3_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 445KB
- Sample260808-fm7dfahr2w
- SHA256 2a6bc75e95cb21ca619de17adc31297cadecda2bfcfba042b6fcd1113853a488
- MD5 5dbe625034bada869373630dc02361d3
- SHA1 05f5036129b173be07cfb73845ad900902c8c58c
- SHA512 49f7805bcbc30ec1068c4cf6b674dae19d117a084cb2fdae68b2c8b9b269092280cea37fceeb555b0382392bed1c72c36240e7c679d076527d2b1041ae8f8568
- SSDEEP 6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMI26:rKf1PyKa2H3hOHOHz9JQ6zBn26
- TLSH T1AAA4BE2572808436F76A0B3049A1E6E50868BC3927A5E58FF378BD3A2D701D35A7735F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_5dbe625034bada869373630dc02361d3_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-08_5dbe625034bada869373630dc02361d3_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 445KB
- SHA256 2a6bc75e95cb21ca619de17adc31297cadecda2bfcfba042b6fcd1113853a488
- MD5 5dbe625034bada869373630dc02361d3
- SHA1 05f5036129b173be07cfb73845ad900902c8c58c
- SHA512 49f7805bcbc30ec1068c4cf6b674dae19d117a084cb2fdae68b2c8b9b269092280cea37fceeb555b0382392bed1c72c36240e7c679d076527d2b1041ae8f8568
- SSDEEP 6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMI26:rKf1PyKa2H3hOHOHz9JQ6zBn26
- TLSH T1AAA4BE2572808436F76A0B3049A1E6E50868BC3927A5E58FF378BD3A2D701D35A7735F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE