General
- Target 2026-07-15_f036aa41a7b8715ec3839952da6a1a69_elex_rhadamanthys_stop
- Size 1.6MB
- Sample260715-k249vaf13n
- SHA256 2053eb779e9f0266d0f0a013af63895e9b8244e755073e4159d9f5ff88527843
- MD5 f036aa41a7b8715ec3839952da6a1a69
- SHA1 747f76c5f77135d60d1c5689b84f51eda5a8fc31
- SHA512 22c1b2e7ff75a6963667f91601a4aea6ee1285d8e8cd077e77c53c644f51dbebea9683d90a787825d9cf892a87f543d7593ef728709a082bf56b7dd21411b1e1
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mx:Qx9GzHlTv/b35tecFB6a
- TLSH T167853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_f036aa41a7b8715ec3839952da6a1a69_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-07-15_f036aa41a7b8715ec3839952da6a1a69_elex_rhadamanthys_stop
- Size 1.6MB
- SHA256 2053eb779e9f0266d0f0a013af63895e9b8244e755073e4159d9f5ff88527843
- MD5 f036aa41a7b8715ec3839952da6a1a69
- SHA1 747f76c5f77135d60d1c5689b84f51eda5a8fc31
- SHA512 22c1b2e7ff75a6963667f91601a4aea6ee1285d8e8cd077e77c53c644f51dbebea9683d90a787825d9cf892a87f543d7593ef728709a082bf56b7dd21411b1e1
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mx:Qx9GzHlTv/b35tecFB6a
- TLSH T167853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE