General
- Target 2026-06-26_4da5f82270b9f3d3d76cfcb34650165b_elex_rhadamanthys_stop
- Size 1.6MB
- Sample260629-tnz8eahv6y
- SHA256 aa7468f2244bc74c1dd4a009457c175f5a219f2020a960ef6359e990918e4713
- MD5 4da5f82270b9f3d3d76cfcb34650165b
- SHA1 9740ac7aefca494733799c67923ebda7cf416bec
- SHA512 c6dc0219f8f41cdd6608fc6412170ef2459cdbc10919393b0f0058fab0309a3d328b3d3e739c988458a42727e6c4f65e48e3bb4fbfc5fa6706c063308fb09bfc
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6m1:Qx9GzHlTv/b35tecFB6i
- TLSH T146853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-26_4da5f82270b9f3d3d76cfcb34650165b_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-06-26_4da5f82270b9f3d3d76cfcb34650165b_elex_rhadamanthys_stop
- Size 1.6MB
- SHA256 aa7468f2244bc74c1dd4a009457c175f5a219f2020a960ef6359e990918e4713
- MD5 4da5f82270b9f3d3d76cfcb34650165b
- SHA1 9740ac7aefca494733799c67923ebda7cf416bec
- SHA512 c6dc0219f8f41cdd6608fc6412170ef2459cdbc10919393b0f0058fab0309a3d328b3d3e739c988458a42727e6c4f65e48e3bb4fbfc5fa6706c063308fb09bfc
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6m1:Qx9GzHlTv/b35tecFB6i
- TLSH T146853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE