General
- Target 2026-07-09_053baedb34a99a10fdc41cad8f4bc575_elex_rhadamanthys_stop
- Size 1.6MB
- Sample260709-12pgdsbt4t
- SHA256 ed5e1d1f7710e74677c4a6d191cdb01cc8128af81cc1d747ab4e82ac46fbe84a
- MD5 053baedb34a99a10fdc41cad8f4bc575
- SHA1 4e3adc7834f12b71af88d3ba42e933575b3d8d1d
- SHA512 f09d187b8b5d0aa4f0d58488c13c8f0510a1f179565cbcacadd17c57e16aa6ef812bb04b05af28b74a87821c14a897c30f562fa905b31b6be3249a53a434aba9
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6m4:Qx9GzHlTv/b35tecFB6v
- TLSH T1DA853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-09_053baedb34a99a10fdc41cad8f4bc575_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-07-09_053baedb34a99a10fdc41cad8f4bc575_elex_rhadamanthys_stop
- Size 1.6MB
- SHA256 ed5e1d1f7710e74677c4a6d191cdb01cc8128af81cc1d747ab4e82ac46fbe84a
- MD5 053baedb34a99a10fdc41cad8f4bc575
- SHA1 4e3adc7834f12b71af88d3ba42e933575b3d8d1d
- SHA512 f09d187b8b5d0aa4f0d58488c13c8f0510a1f179565cbcacadd17c57e16aa6ef812bb04b05af28b74a87821c14a897c30f562fa905b31b6be3249a53a434aba9
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6m4:Qx9GzHlTv/b35tecFB6v
- TLSH T1DA853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE