General
- Target 2026-04-16_b79b5fa9e9de580a15ac3a40430ee4ee_elex_rhadamanthys_stop
- Size 1.6MB
- Sample260416-1k7xeaev91
- SHA256 4ba2f48fd7b4e442b948412af15fd4776370853517aee2dcccb5d8beb863ede7
- MD5 b79b5fa9e9de580a15ac3a40430ee4ee
- SHA1 4024d666d490b134db8d975a3a3fc9bc3456c6e8
- SHA512 bb70f1b02ad42593c49f05c928c7d8a5564d98df36e4f46ff7c680af66f475925b9b02117fab25a59a35868723ff7e616f99bdf51e0e62b7de19307140e10080
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mn:Qx9GzHlTv/b35tecFB6Y
- TLSH T1AB853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-16_b79b5fa9e9de580a15ac3a40430ee4ee_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-04-16_b79b5fa9e9de580a15ac3a40430ee4ee_elex_rhadamanthys_stop
- Size 1.6MB
- SHA256 4ba2f48fd7b4e442b948412af15fd4776370853517aee2dcccb5d8beb863ede7
- MD5 b79b5fa9e9de580a15ac3a40430ee4ee
- SHA1 4024d666d490b134db8d975a3a3fc9bc3456c6e8
- SHA512 bb70f1b02ad42593c49f05c928c7d8a5564d98df36e4f46ff7c680af66f475925b9b02117fab25a59a35868723ff7e616f99bdf51e0e62b7de19307140e10080
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mn:Qx9GzHlTv/b35tecFB6Y
- TLSH T1AB853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE