General
- Target 2026-04-17_a31843283bc741141f2bbc80d88af736_elex_rhadamanthys_stop
- Size 467KB
- Sample260417-ems1daey7m
- SHA256 e3a83e8cff40aecf76593dd75a1b298dae9fc37c0650c7324c9a2ee84c1144ea
- MD5 a31843283bc741141f2bbc80d88af736
- SHA1 71673ad78f53b4ec62a70a8295931f0c8f46972c
- SHA512 4636d6ede6af4adf54b34b660cb83c6a572ad4f3b9232b7a6e39df43d78cfccc6de59a7cf1dc302c9ad00e740b9bc3ce8ecabce0cd6fe2278fdef34386784d29
- SSDEEP 12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6ma:9x9GzHlTv/b35tecFB6H
- TLSH T127A4CF153680C472E36627750996E6F01AAABC3849A4D28FFB787F395E311934A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-17_a31843283bc741141f2bbc80d88af736_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-04-17_a31843283bc741141f2bbc80d88af736_elex_rhadamanthys_stop
- Size 467KB
- SHA256 e3a83e8cff40aecf76593dd75a1b298dae9fc37c0650c7324c9a2ee84c1144ea
- MD5 a31843283bc741141f2bbc80d88af736
- SHA1 71673ad78f53b4ec62a70a8295931f0c8f46972c
- SHA512 4636d6ede6af4adf54b34b660cb83c6a572ad4f3b9232b7a6e39df43d78cfccc6de59a7cf1dc302c9ad00e740b9bc3ce8ecabce0cd6fe2278fdef34386784d29
- SSDEEP 12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6ma:9x9GzHlTv/b35tecFB6H
- TLSH T127A4CF153680C472E36627750996E6F01AAABC3849A4D28FFB787F395E311934A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE