Extracted

• • Target
    2026-08-27_70aacd129b09b599cedadd3f54c7eace_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 410KB
  • SHA256 817663e386ff5c4a6edfe4b823a04c05ff73730afee44e9cb1d9d3856543cfb0
  • MD5 70aacd129b09b599cedadd3f54c7eace
  • SHA1 af8e58f5db2b6385c1367bb1f3a5f19aa5275ced
  • SHA512 2fe509e9cb2e480269fbc99e106006bdbd9b2cdd3ea1c466677e0ddb505213e10039d4fcf7a7bbee021a420bfc8b23e0e172fe1f26676f2b760b0ba49f419e54
  • SSDEEP 6144:Y5SXvBoDWoyLYyzbwOC4DYM6SB6v+qLnAzYmhwrxcvkzmSB7ohVt:YIfBoDWoyFbkU6hAJQnax
  • TLSH
    T16A94BE253540C436F3290B354856EAB109A9BC3A14D9E48FF7787E7A6D321939B3B24F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryexecutionstealcurelasstealertrojan

  • Detects Stealc stealer Version 3

  • Family: Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Family: Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2