General
- Target 2026-08-12_719c0869895761fdd40f456fb4d93f3e_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 595KB
- Sample260812-e57w9aae28
- SHA256 ab8f992921e092e81e7ad837c5f8b6555ea76930695f34391f1bcc57030aca10
- MD5 719c0869895761fdd40f456fb4d93f3e
- SHA1 3bd427dde9ae8e3278a7a086209769de2966f5ec
- SHA512 a2bc40908adc3aae84309bd7c66f543c1e5a42e84ab03e4a266233c1e73056f56187e937260f6271b7b97df984bb87e505d62750bf55d3890740b85e52dc7764
- SSDEEP 6144:8EK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFa:8MpASIcWYx2U6hAJQnb
- TLSH T1BAD494685828C8D6E795D534E82CEB1596F48CF17B8300ABB076F9FCD4B22D161AF50E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_719c0869895761fdd40f456fb4d93f3e_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_719c0869895761fdd40f456fb4d93f3e_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-12_719c0869895761fdd40f456fb4d93f3e_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 595KB
- SHA256 ab8f992921e092e81e7ad837c5f8b6555ea76930695f34391f1bcc57030aca10
- MD5 719c0869895761fdd40f456fb4d93f3e
- SHA1 3bd427dde9ae8e3278a7a086209769de2966f5ec
- SHA512 a2bc40908adc3aae84309bd7c66f543c1e5a42e84ab03e4a266233c1e73056f56187e937260f6271b7b97df984bb87e505d62750bf55d3890740b85e52dc7764
- SSDEEP 6144:8EK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFa:8MpASIcWYx2U6hAJQnb
- TLSH T1BAD494685828C8D6E795D534E82CEB1596F48CF17B8300ABB076F9FCD4B22D161AF50E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE