General
- Target 2026-07-01_baee77aa4468c17e4baa9562aa7ff7ac_elex_rhadamanthys_stealc_stop
- Size 525KB
- Sample260701-12jadagy2x
- SHA256 857fcda44e93e28e80ddcdc7b59df62549a702303904b24c192c24f32a36384a
- MD5 baee77aa4468c17e4baa9562aa7ff7ac
- SHA1 fcf736b83affe46630a56dfcdcbfcdf122aa42a3
- SHA512 c8905f08145cd3a5d2a24a186316dce2986a3049b8b418080c3a57ffc8d6033fa2c6fbbca7842739438bf975d89b926e88a4d809db37a46dd6ad75ff5109d6bb
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigw:YwGtVfjTQSaoINAHTusMgDND4oqnDR
- TLSH T1D4B4BF103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-01_baee77aa4468c17e4baa9562aa7ff7ac_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-07-01_baee77aa4468c17e4baa9562aa7ff7ac_elex_rhadamanthys_stealc_stop
- Size 525KB
- SHA256 857fcda44e93e28e80ddcdc7b59df62549a702303904b24c192c24f32a36384a
- MD5 baee77aa4468c17e4baa9562aa7ff7ac
- SHA1 fcf736b83affe46630a56dfcdcbfcdf122aa42a3
- SHA512 c8905f08145cd3a5d2a24a186316dce2986a3049b8b418080c3a57ffc8d6033fa2c6fbbca7842739438bf975d89b926e88a4d809db37a46dd6ad75ff5109d6bb
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigw:YwGtVfjTQSaoINAHTusMgDND4oqnDR
- TLSH T1D4B4BF103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE