General
- Target 2026-08-20_48faf4639c049f179af137d1cc3a0f8b_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 593KB
- Sample260820-gn6c7sfk41
- SHA256 8109aa6e3f387c61f07f30ac0ce1de4aca98dc370202abc5efea93ad3be40670
- MD5 48faf4639c049f179af137d1cc3a0f8b
- SHA1 b9930192ca36e9688d7fbb9f34735765b7b50537
- SHA512 453add9a93d34e9fef8a5e13342e596b9fc7ebab12f23b32a0b786d85e78eb5a86830f6821c7221cd41466bea346a6cf94d10b7ff446d414959688f90e5281d3
- SSDEEP 6144:8EK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFME:8MpASIcWYx2U6hAJQnhE
- TLSH T151D494685828C8D6E795D534E82CEB1596F48CF17B8300ABB076F9FCD4B22D161AF50E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_48faf4639c049f179af137d1cc3a0f8b_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-20_48faf4639c049f179af137d1cc3a0f8b_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 593KB
- SHA256 8109aa6e3f387c61f07f30ac0ce1de4aca98dc370202abc5efea93ad3be40670
- MD5 48faf4639c049f179af137d1cc3a0f8b
- SHA1 b9930192ca36e9688d7fbb9f34735765b7b50537
- SHA512 453add9a93d34e9fef8a5e13342e596b9fc7ebab12f23b32a0b786d85e78eb5a86830f6821c7221cd41466bea346a6cf94d10b7ff446d414959688f90e5281d3
- SSDEEP 6144:8EK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFME:8MpASIcWYx2U6hAJQnhE
- TLSH T151D494685828C8D6E795D534E82CEB1596F48CF17B8300ABB076F9FCD4B22D161AF50E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE