General
- Target 2026-08-22_57f079fed94a33484b075669d2184673_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 431KB
- Sample260823-j3pecafm3y
- SHA256 aafdb991b2a0d17cf3fcf6ec6b0f28090b7e4e020439590515173a84ea03deb3
- MD5 57f079fed94a33484b075669d2184673
- SHA1 13c78633bbfbd1d84604115ec70615c3ed1d8630
- SHA512 245f7f25a5fbd7120605b98295a6c912fe52fe644b4e34e5818a68745b3986ae5fead509e8e7e1d27c2569530bd3c7d4f4e2d8914585717c5533467b4c187e72
- SSDEEP 6144:to3wRi+1Py3V0a2WkQ6P9N2Y/Op9eXQ6fU//BFuHt07Vx9UlM:w6f1PyKa2u6P9N2y3U/mHyUM
- TLSH T1EC94AE2072508075F3AA0B3059A5E6E548687D3917A4E88FF7787E3A29711D39A7338F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-22_57f079fed94a33484b075669d2184673_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-22_57f079fed94a33484b075669d2184673_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 431KB
- SHA256 aafdb991b2a0d17cf3fcf6ec6b0f28090b7e4e020439590515173a84ea03deb3
- MD5 57f079fed94a33484b075669d2184673
- SHA1 13c78633bbfbd1d84604115ec70615c3ed1d8630
- SHA512 245f7f25a5fbd7120605b98295a6c912fe52fe644b4e34e5818a68745b3986ae5fead509e8e7e1d27c2569530bd3c7d4f4e2d8914585717c5533467b4c187e72
- SSDEEP 6144:to3wRi+1Py3V0a2WkQ6P9N2Y/Op9eXQ6fU//BFuHt07Vx9UlM:w6f1PyKa2u6P9N2y3U/mHyUM
- TLSH T1EC94AE2072508075F3AA0B3059A5E6E548687D3917A4E88FF7787E3A29711D39A7338F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE