General
- Target 2026-10-19_6cbf5d254ae446166fb2cbbe4eb03c5b_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 408KB
- Sample261020-vsac8acv5t
- SHA256 b56b9f7e6b4e0ec15181e186b011402d3a041cc4e570c795d9597a3cb963998c
- MD5 6cbf5d254ae446166fb2cbbe4eb03c5b
- SHA1 3271954845f3115b029865b5f40ccd1ee6a4a935
- SHA512 91ba9ecef5eeecfde5c2ea2d3bf2a587a5fe2ea4f47e99fc2c2187368f1e4c5f11a303f9c27ab9100b0e38a77430e8dccf3494632f1a8a613e36c0813696acad
- SSDEEP 6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohpg:8IfBoDWoyFblU6hAJQnOs
- TLSH T1F494BE253640C436F3290B354456EAB149A9BC3914D9E48FF778BE7A6D311938B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-19_6cbf5d254ae446166fb2cbbe4eb03c5b_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-10-19_6cbf5d254ae446166fb2cbbe4eb03c5b_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 408KB
- SHA256 b56b9f7e6b4e0ec15181e186b011402d3a041cc4e570c795d9597a3cb963998c
- MD5 6cbf5d254ae446166fb2cbbe4eb03c5b
- SHA1 3271954845f3115b029865b5f40ccd1ee6a4a935
- SHA512 91ba9ecef5eeecfde5c2ea2d3bf2a587a5fe2ea4f47e99fc2c2187368f1e4c5f11a303f9c27ab9100b0e38a77430e8dccf3494632f1a8a613e36c0813696acad
- SSDEEP 6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohpg:8IfBoDWoyFblU6hAJQnOs
- TLSH T1F494BE253640C436F3290B354456EAB149A9BC3914D9E48FF778BE7A6D311938B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE