General

  • Target
    2026-10-20_083f0587aa6bad25fb1bf1c732d57af2_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 409KB
  • Sample261020-k9eddsfx51
  • SHA256 80d8d4deeff46da16a1eeca03051d937f72c72a2b6d8e45c8608d2a803078b31
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • urelas

C2
  • 218.54.31.165

  • 218.54.31.226

Targets

    • Target
      2026-10-20_083f0587aa6bad25fb1bf1c732d57af2_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
    • Size 409KB
    • SHA256 80d8d4deeff46da16a1eeca03051d937f72c72a2b6d8e45c8608d2a803078b31
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks