General
- Target 2026-10-02_3ea0462711d09e98879a58a39573659c_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 400KB
- Sample261003-rer5bs1v2l
- SHA256 94833a833b099e17a627b662e4f1f97df2dbb7e7f785bb4e9a42456e5e7c3e16
- MD5 3ea0462711d09e98879a58a39573659c
- SHA1 6f94a7a81edc5afd6b0e65afa23063835cfa8608
- SHA512 31fb675bcd6aafc7dbedce9e9ee7e3ca3716131be95549357d17262fa2819308b0225cd612c5b860b76b4d8e544870da9f034217eb8a0febea25e36a28577dd1
- SSDEEP 6144:5dSK04ETTZ+4TBpvjLChvTnvtp9fBDSplK3NsZ5TqiijuWwIOWDYl:5oL4EnU4T/vjL8t/RSplK3Ns/yB/Ra
- TLSH T1B194194A311C57E5E5DF18B883CEDAF2D3DEDD2062321462BAB470932E58375ECE8691
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_3ea0462711d09e98879a58a39573659c_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_3ea0462711d09e98879a58a39573659c_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 400KB
- SHA256 94833a833b099e17a627b662e4f1f97df2dbb7e7f785bb4e9a42456e5e7c3e16
- MD5 3ea0462711d09e98879a58a39573659c
- SHA1 6f94a7a81edc5afd6b0e65afa23063835cfa8608
- SHA512 31fb675bcd6aafc7dbedce9e9ee7e3ca3716131be95549357d17262fa2819308b0225cd612c5b860b76b4d8e544870da9f034217eb8a0febea25e36a28577dd1
- SSDEEP 6144:5dSK04ETTZ+4TBpvjLChvTnvtp9fBDSplK3NsZ5TqiijuWwIOWDYl:5oL4EnU4T/vjL8t/RSplK3Ns/yB/Ra
- TLSH T1B194194A311C57E5E5DF18B883CEDAF2D3DEDD2062321462BAB470932E58375ECE8691
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)