General

  • Target
    2026-11-09_d321a6ecc1cde69dd31a7b7d4d098b51_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 197KB
  • Sample261109-wxedeaes8m
  • SHA256 f36c5f9eb651818e7b63a53090e698165f3b7d59d8678a33f893087fc995b540
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • arkei

Botnet
  • Default

C2
  • guseyn.link/ggate.php

Targets

    • Target
      2026-11-09_d321a6ecc1cde69dd31a7b7d4d098b51_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
    • Size 197KB
    • SHA256 f36c5f9eb651818e7b63a53090e698165f3b7d59d8678a33f893087fc995b540
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Arkei

      Arkei is an infostealer written in C++.

    • Custom signature

      Detects executables containing potential Windows Defender anti-emulation checks

MITRE ATT&CK Enterprise v16

Tasks