General
- Target 2026-11-12_07948ec53f0d24154f53c7508d956405_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 456KB
- Sample261113-ktbmkasx2k
- SHA256 46ec7da9cb362835361d12dd50fc29a2b5115a3ce4d6077e3d80e24472148682
- MD5 07948ec53f0d24154f53c7508d956405
- SHA1 b479dfdc9bcfe70b47b625de5dbbd4ef21bd2a4a
- SHA512 73b945dbb3f7aa7ffe37573cd0a1948184de2c621a4981c0c4f4a71fdeecdc23d2e898ec3f6c8553498e7da49828429a59700b59f546fdcd59b33a8116153b9e
- SSDEEP 6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdF9e:CMpASIcWYx2U6hAJQn2e
- TLSH T158A4BE147640D476E31A0B310416EAB44AA96C3A17D9E48FF7383E766E312D3977B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-12_07948ec53f0d24154f53c7508d956405_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-11-12_07948ec53f0d24154f53c7508d956405_amadey_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 456KB
- SHA256 46ec7da9cb362835361d12dd50fc29a2b5115a3ce4d6077e3d80e24472148682
- MD5 07948ec53f0d24154f53c7508d956405
- SHA1 b479dfdc9bcfe70b47b625de5dbbd4ef21bd2a4a
- SHA512 73b945dbb3f7aa7ffe37573cd0a1948184de2c621a4981c0c4f4a71fdeecdc23d2e898ec3f6c8553498e7da49828429a59700b59f546fdcd59b33a8116153b9e
- SSDEEP 6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdF9e:CMpASIcWYx2U6hAJQn2e
- TLSH T158A4BE147640D476E31A0B310416EAB44AA96C3A17D9E48FF7383E766E312D3977B28F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE