General
- Target 2026-10-13_59e65919f391b7e535389d05df157501_amadey_elex_rhadamanthys_smoke-loader_stealc
- Size 480KB
- Sample261015-p8nb5ass4m
- SHA256 796555c64fdc470a7462f705f43654226d27da1924e5fc9ba1feba06c0344561
- MD5 59e65919f391b7e535389d05df157501
- SHA1 bf6403a8517665fde161fdafc7146225797d8090
- SHA512 c810214aa992d1f75383b198f814d3b10d5a40f58874ce31eb47fd9d129be6cca56f93fcd7372d4823a82559ffd549c7d4605ccc061dd33d999acb386444b9e6
- SSDEEP 12288:qA+AUTpldpbKSb8l52Qyvj5yMUaSv/DLO4A37z3wa362UnNuI55JPB0b+g56:qA+AUTpldpbba5kv8MUaSzLO/3PwfNNN
- TLSH T1F3A449312BCB5AB5E363E8F246FAF7E18579F531961FD25ED3CC0F0A45229809910E1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-13_59e65919f391b7e535389d05df157501_amadey_elex_rhadamanthys_smoke-loader_stealc.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_59e65919f391b7e535389d05df157501_amadey_elex_rhadamanthys_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_59e65919f391b7e535389d05df157501_amadey_elex_rhadamanthys_smoke-loader_stealc
- Size 480KB
- SHA256 796555c64fdc470a7462f705f43654226d27da1924e5fc9ba1feba06c0344561
- MD5 59e65919f391b7e535389d05df157501
- SHA1 bf6403a8517665fde161fdafc7146225797d8090
- SHA512 c810214aa992d1f75383b198f814d3b10d5a40f58874ce31eb47fd9d129be6cca56f93fcd7372d4823a82559ffd549c7d4605ccc061dd33d999acb386444b9e6
- SSDEEP 12288:qA+AUTpldpbKSb8l52Qyvj5yMUaSv/DLO4A37z3wa362UnNuI55JPB0b+g56:qA+AUTpldpbba5kv8MUaSzLO/3PwfNNN
- TLSH T1F3A449312BCB5AB5E363E8F246FAF7E18579F531961FD25ED3CC0F0A45229809910E1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE