General
- Target 2026-08-31_c88ba9d192ed0a120a8c68f3eb403ba8_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 387KB
- Sample260831-r4457aha65
- SHA256 9d1b1054190d5932ed3b46b36dff067da20f3eeddf8c6dd778a01399991e985f
- MD5 c88ba9d192ed0a120a8c68f3eb403ba8
- SHA1 8d60fe68b8bd619c639c1069da580a2153e40fb4
- SHA512 4aeb251dc57fae5967080920af24c096247c356f700125ffaa6bebbe0d0b3337b7200d64ebbb3f96b5b8df11f8cb02dbd138ce3d3ab7d8263d84dba5f4c2c60c
- SSDEEP 6144:S8efQ6QPJGcLbjg0EuDK4UnUHOkb8734A2P6gt99Wvtxrpp29xQp4D:76QPJGcE0hKRg04zPZt9mtPOF
- TLSH T18C84BF217240C035E3A6033559A6E6F159A86E3A1794E08FF7787E795F312C3AA3324F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-31_c88ba9d192ed0a120a8c68f3eb403ba8_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_c88ba9d192ed0a120a8c68f3eb403ba8_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 387KB
- SHA256 9d1b1054190d5932ed3b46b36dff067da20f3eeddf8c6dd778a01399991e985f
- MD5 c88ba9d192ed0a120a8c68f3eb403ba8
- SHA1 8d60fe68b8bd619c639c1069da580a2153e40fb4
- SHA512 4aeb251dc57fae5967080920af24c096247c356f700125ffaa6bebbe0d0b3337b7200d64ebbb3f96b5b8df11f8cb02dbd138ce3d3ab7d8263d84dba5f4c2c60c
- SSDEEP 6144:S8efQ6QPJGcLbjg0EuDK4UnUHOkb8734A2P6gt99Wvtxrpp29xQp4D:76QPJGcE0hKRg04zPZt9mtPOF
- TLSH T18C84BF217240C035E3A6033559A6E6F159A86E3A1794E08FF7787E795F312C3AA3324F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE