General
- Target 2026-04-25_5b7262a6a31fc7b78dfe71b180c25377_elex_rhadamanthys_stealc_stop
- Size 525KB
- Sample260425-zphyeahx4y
- SHA256 01f4c31bcf849ae92a4184ae311409c8c93561ac8f23359b727ddaa5a75d0f32
- MD5 5b7262a6a31fc7b78dfe71b180c25377
- SHA1 3473ac9c14294454a747c431a26b3c9f76ae900e
- SHA512 1c881c8b954751ce71362a76d5ff4b1a0c2e0e0a4081cda82f927b1b2a79c2e73f080cd1cec27b7635f4e25b0f0b27e178a75ca658770188cad599b9a424e8bc
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigV:YwGtVfjTQSaoINAHTusMgDND4oqnDE
- TLSH T10DB4BF103790C475E366273108A6E6F009B9BC385AA5D68FF7A47E3A5E311938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-25_5b7262a6a31fc7b78dfe71b180c25377_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-04-25_5b7262a6a31fc7b78dfe71b180c25377_elex_rhadamanthys_stealc_stop
- Size 525KB
- SHA256 01f4c31bcf849ae92a4184ae311409c8c93561ac8f23359b727ddaa5a75d0f32
- MD5 5b7262a6a31fc7b78dfe71b180c25377
- SHA1 3473ac9c14294454a747c431a26b3c9f76ae900e
- SHA512 1c881c8b954751ce71362a76d5ff4b1a0c2e0e0a4081cda82f927b1b2a79c2e73f080cd1cec27b7635f4e25b0f0b27e178a75ca658770188cad599b9a424e8bc
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigV:YwGtVfjTQSaoINAHTusMgDND4oqnDE
- TLSH T10DB4BF103790C475E366273108A6E6F009B9BC385AA5D68FF7A47E3A5E311938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE