General
- Target 2026-04-15_df0173edb4b21e8f9441ac435d5517b1_elex_rhadamanthys_stealc_stop
- Size 530KB
- Sample260415-ebp5caes4m
- SHA256 b3c5380bb3ee4ca1da7ea6fa3c17d0e02228725a0ed490fe5e67b2be8b68f265
- MD5 df0173edb4b21e8f9441ac435d5517b1
- SHA1 ee5787941241fc12185677e732a4adac2ec367e5
- SHA512 c8a14ba78bfd6f9be4f675ac6f3eff81fbffbd493cf7b2b8b63234f01e9bc8d7e4169310ba6cd6044035171d74177b494b3c7527cd448b9dc317d14fac6ff292
- SSDEEP 12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK52it1:PMUv2LAv9AQ1p4dK48
- TLSH T1F1C4CF1076908436F37A27354896E6F409797C385AA4E58FF6A43E3A5E312D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-15_df0173edb4b21e8f9441ac435d5517b1_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
-
218.54.31.166
Targets
-
- Target 2026-04-15_df0173edb4b21e8f9441ac435d5517b1_elex_rhadamanthys_stealc_stop
- Size 530KB
- SHA256 b3c5380bb3ee4ca1da7ea6fa3c17d0e02228725a0ed490fe5e67b2be8b68f265
- MD5 df0173edb4b21e8f9441ac435d5517b1
- SHA1 ee5787941241fc12185677e732a4adac2ec367e5
- SHA512 c8a14ba78bfd6f9be4f675ac6f3eff81fbffbd493cf7b2b8b63234f01e9bc8d7e4169310ba6cd6044035171d74177b494b3c7527cd448b9dc317d14fac6ff292
- SSDEEP 12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK52it1:PMUv2LAv9AQ1p4dK48
- TLSH T1F1C4CF1076908436F37A27354896E6F409797C385AA4E58FF6A43E3A5E312D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE