Extracted

• • Target
    2026-08-27_e8dc02da834f0c7e48635aa93858d9a4_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 407KB
  • SHA256 4480dcf619cd35a792bc3d2da7a87ebff8b2b5ffe4d69e0a01f0c3e747f18572
  • MD5 e8dc02da834f0c7e48635aa93858d9a4
  • SHA1 271cae49d2c8fc3b2ef7db07a91ebbb5d3595b60
  • SHA512 cdf566734eed2363efb56e6b3a85af26ab5875a44e7cea7b8dded19db2020ad3f8b3b2dae3d6fd72f0f8a40923e1997cf141baa270a9d2e4c3a649c2d1f73cfb
  • SSDEEP 6144:Y5SXvBoDWoyLYyzbwOC4DYM6SB6v+qLnAzYmhwrxcvkzmSB7ohL:YIfBoDWoyFbkU6hAJQnaN
  • TLSH
    T1B694BE253540C436F3290B354855EAB10AA9BC3914D9E48FF778BE7A6D321938B7B24F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryexecutionstealcurelasstealertrojan

  • Detects Stealc stealer Version 3

  • Family: Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Family: Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2