General
- Target 2026-08-10_f2a24bb95eb93e0539cf360816272f39_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 431KB
- Sample260810-eaz8xsvtay
- SHA256 7f95693dca9620455cbc9e7a3b1b74b9f02f8031a6d4c5f23d8ced20cf95ef02
- MD5 f2a24bb95eb93e0539cf360816272f39
- SHA1 037ae4a51c63fefa7b6224f64a73ac4b84b98bc4
- SHA512 fc3b0431fdb08c1970308c0c33e30f8accc0c0d7ecbd71230bd1aacf68006aa75534a3480d88707bb5def02605e02320d989ea9ef0cdb35a1e4e3ade4b4314a1
- SSDEEP 6144:to3wRi+1Py3V0a2WkQ6P9N2Y/Op9eXQ6fU//BFuHt07Vx9Ult:w6f1PyKa2u6P9N2y3U/mHyUt
- TLSH T1BF94AE2072508075F3AA0B3059A5E6F548687D3917A4E48FF7787E3A29712D39A7338F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_f2a24bb95eb93e0539cf360816272f39_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-10_f2a24bb95eb93e0539cf360816272f39_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 431KB
- SHA256 7f95693dca9620455cbc9e7a3b1b74b9f02f8031a6d4c5f23d8ced20cf95ef02
- MD5 f2a24bb95eb93e0539cf360816272f39
- SHA1 037ae4a51c63fefa7b6224f64a73ac4b84b98bc4
- SHA512 fc3b0431fdb08c1970308c0c33e30f8accc0c0d7ecbd71230bd1aacf68006aa75534a3480d88707bb5def02605e02320d989ea9ef0cdb35a1e4e3ade4b4314a1
- SSDEEP 6144:to3wRi+1Py3V0a2WkQ6P9N2Y/Op9eXQ6fU//BFuHt07Vx9Ult:w6f1PyKa2u6P9N2y3U/mHyUt
- TLSH T1BF94AE2072508075F3AA0B3059A5E6F548687D3917A4E48FF7787E3A29712D39A7338F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE