General
- Target 2026-06-27_359add846d0be2a2061c9b46d422c41d_elex_rhadamanthys_stealc_stop
- Size 525KB
- Sample260629-kf5cqag19s
- SHA256 588fe9f662a03d4b0c0159dd34ae2b60c1f99387cf22d7975ec6e374e94db838
- MD5 359add846d0be2a2061c9b46d422c41d
- SHA1 12c3fb00f5076030525a528774a39d368b8e9f05
- SHA512 4c3666006cd0b0290393469bd8d82578fd7ffd880843ddf757ee33824b7d7509e07dd973096115518574051746b850453d9da331d6d9990a6da1c0a00dff7951
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigN:YwGtVfjTQSaoINAHTusMgDND4oqnDI
- TLSH T167B4BE103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-27_359add846d0be2a2061c9b46d422c41d_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-06-27_359add846d0be2a2061c9b46d422c41d_elex_rhadamanthys_stealc_stop
- Size 525KB
- SHA256 588fe9f662a03d4b0c0159dd34ae2b60c1f99387cf22d7975ec6e374e94db838
- MD5 359add846d0be2a2061c9b46d422c41d
- SHA1 12c3fb00f5076030525a528774a39d368b8e9f05
- SHA512 4c3666006cd0b0290393469bd8d82578fd7ffd880843ddf757ee33824b7d7509e07dd973096115518574051746b850453d9da331d6d9990a6da1c0a00dff7951
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigN:YwGtVfjTQSaoINAHTusMgDND4oqnDI
- TLSH T167B4BE103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE