General
- Target 2026-11-12_554910f22a4b16f3fb937bb60c26e0b9_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 396KB
- Sample261113-dclb4sez7w
- SHA256 7c1701084fe65bc30d4dcc2c209255ec1c42c04b66adbbbbcde7b9d437be0c20
- MD5 554910f22a4b16f3fb937bb60c26e0b9
- SHA1 25b8dc3098e713e18fd24095506164a7762e6c9b
- SHA512 661c252f364a0f249f194761498a73d5c4d686ffb095a88b639845d20b1c4d11f9aa716aa0024a6bd55c668aa6a6641c974a9b05dff189051c74d9609e14167c
- SSDEEP 6144:y5SXvBoDWoyLYyzbpPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrBdr:yIfBoDWoyFboU6hAJQnrh
- TLSH T14684BD253140C436F32A0B354456EAB149A9BC3915D9E48FF778BE7A5E311938B3B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-12_554910f22a4b16f3fb937bb60c26e0b9_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-11-12_554910f22a4b16f3fb937bb60c26e0b9_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 396KB
- SHA256 7c1701084fe65bc30d4dcc2c209255ec1c42c04b66adbbbbcde7b9d437be0c20
- MD5 554910f22a4b16f3fb937bb60c26e0b9
- SHA1 25b8dc3098e713e18fd24095506164a7762e6c9b
- SHA512 661c252f364a0f249f194761498a73d5c4d686ffb095a88b639845d20b1c4d11f9aa716aa0024a6bd55c668aa6a6641c974a9b05dff189051c74d9609e14167c
- SSDEEP 6144:y5SXvBoDWoyLYyzbpPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrBdr:yIfBoDWoyFboU6hAJQnrh
- TLSH T14684BD253140C436F32A0B354456EAB149A9BC3915D9E48FF778BE7A5E311938B3B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE