General
- Target 2026-08-31_e9c21379b35991da3dec3078a2007ba8_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 595KB
- Sample260831-qkwt2agg28
- SHA256 921dec1a3e46148ce312046a2105546a2c346acb0792bad04229df09a2bd661d
- MD5 e9c21379b35991da3dec3078a2007ba8
- SHA1 1648118b72edaa01a066e0d693219fc5bae4ef6e
- SHA512 1d41903e49375b433901b43069257d2ad6c34dea36485d3b24625794736cfa777e83b981b8a458dfb19da112abda01cc7b0744d126bcec8063db681709ed5486
- SSDEEP 6144:8EK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFd:8MpASIcWYx2U6hAJQnU
- TLSH T1EDD494685828C8D6E795D534E82CEB1596F48CF17B8300ABB076F9FCD4B22D161AF50E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-08-31_e9c21379b35991da3dec3078a2007ba8_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 595KB
- SHA256 921dec1a3e46148ce312046a2105546a2c346acb0792bad04229df09a2bd661d
- MD5 e9c21379b35991da3dec3078a2007ba8
- SHA1 1648118b72edaa01a066e0d693219fc5bae4ef6e
- SHA512 1d41903e49375b433901b43069257d2ad6c34dea36485d3b24625794736cfa777e83b981b8a458dfb19da112abda01cc7b0744d126bcec8063db681709ed5486
- SSDEEP 6144:8EK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFd:8MpASIcWYx2U6hAJQnU
- TLSH T1EDD494685828C8D6E795D534E82CEB1596F48CF17B8300ABB076F9FCD4B22D161AF50E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Stealc stealer Version 3
-
Executes dropped EXE