General
- Target 2026-11-03_66b88d9c02915085af94e2ce29867e3b_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 442KB
- Sample261104-w28statxbz
- SHA256 329a0bb846bff69cce0bc64fcc6b83ae4faa2856ad490ae06ac1c2193b8acd81
- MD5 66b88d9c02915085af94e2ce29867e3b
- SHA1 0fea4beb3908560873ad387428fa2b8c68e1f170
- SHA512 5ff4f3fcfd555fe48cc8e87b06ee19e29d8358c288e846e973d5bc070c4b3297b1534c19415790742d6948c3fe72b20323e4fb1ded43eadfd223b2032fed9870
- SSDEEP 6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMIE:rKf1PyKa2H3hOHOHz9JQ6zBnE
- TLSH T1CAA4AE2562808436F76A0B3049A1E6F50868BC3927A5E58FF378BD3A2D701D35A7735F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-03_66b88d9c02915085af94e2ce29867e3b_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-11-03_66b88d9c02915085af94e2ce29867e3b_amadey_elex_karagany_rhadamanthys_smoke-loader_stealc_tofsee
- Size 442KB
- SHA256 329a0bb846bff69cce0bc64fcc6b83ae4faa2856ad490ae06ac1c2193b8acd81
- MD5 66b88d9c02915085af94e2ce29867e3b
- SHA1 0fea4beb3908560873ad387428fa2b8c68e1f170
- SHA512 5ff4f3fcfd555fe48cc8e87b06ee19e29d8358c288e846e973d5bc070c4b3297b1534c19415790742d6948c3fe72b20323e4fb1ded43eadfd223b2032fed9870
- SSDEEP 6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMIE:rKf1PyKa2H3hOHOHz9JQ6zBnE
- TLSH T1CAA4AE2562808436F76A0B3049A1E6F50868BC3927A5E58FF378BD3A2D701D35A7735F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE