General
- Target 2026-09-24_6a12c5842c5ede13e7d98331737e8bea_amadey_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 144KB
- Sample260925-jspblacb56
- SHA256 0cd5426c4b50b24452af789881f670c5c88ff4e5f53f7fd04728e58059076b8b
- MD5 6a12c5842c5ede13e7d98331737e8bea
- SHA1 bde891adf92c5033a9eda279f8ef9995f802304b
- SHA512 0bc578b149fb3c587d9f7f81b103ca1c883ecc73d6c6d14404a34882de56df6a1ae2cac2ab5e145385ffc1c66baeaac04170e3d0e91e8671c74a9882755b8e7a
- SSDEEP 3072:DLtCvSL+U74EeQBkH6mvJRErZIiQCH7bB:DLtCS+UcEeQBkBzkZIi5B
- TLSH T1FBE3CF5279D0C837D5A215731874CAD1EE3FFC61FA61864B7B7A3EAF2D602811932362
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_6a12c5842c5ede13e7d98331737e8bea_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
arkei
Botnet
-
Default
C2
-
file-file-host4.com/tratata.php
Targets
-
- Target 2026-09-24_6a12c5842c5ede13e7d98331737e8bea_amadey_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 144KB
- SHA256 0cd5426c4b50b24452af789881f670c5c88ff4e5f53f7fd04728e58059076b8b
- MD5 6a12c5842c5ede13e7d98331737e8bea
- SHA1 bde891adf92c5033a9eda279f8ef9995f802304b
- SHA512 0bc578b149fb3c587d9f7f81b103ca1c883ecc73d6c6d14404a34882de56df6a1ae2cac2ab5e145385ffc1c66baeaac04170e3d0e91e8671c74a9882755b8e7a
- SSDEEP 3072:DLtCvSL+U74EeQBkH6mvJRErZIiQCH7bB:DLtCS+UcEeQBkBzkZIi5B
- TLSH T1FBE3CF5279D0C837D5A215731874CAD1EE3FFC61FA61864B7B7A3EAF2D602811932362
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing potential Windows Defender anti-emulation checks