General
- Target 2026-07-17_54a83d3668f871588c47cbfaace8d12c_elex_rhadamanthys_stealc_stop
- Size 525KB
- Sample260717-2wdndacs2s
- SHA256 e6d187ffc6c68245c5d1b497a6bfda02ba79acac1777414398bec5f40f2fd038
- MD5 54a83d3668f871588c47cbfaace8d12c
- SHA1 3ae5e9825ed78149c26e0342a873eb97eabaf131
- SHA512 7ca2c719286f6e4da50d02cc71c3f354a9287022243c504b2b61c931865e8b55207201433136c064e535722476eae5fefe66c98c7148ebcdd0c79b269f0bc456
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigp:YwGtVfjTQSaoINAHTusMgDND4oqnDQ
- TLSH T182B4BF103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_54a83d3668f871588c47cbfaace8d12c_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-07-17_54a83d3668f871588c47cbfaace8d12c_elex_rhadamanthys_stealc_stop
- Size 525KB
- SHA256 e6d187ffc6c68245c5d1b497a6bfda02ba79acac1777414398bec5f40f2fd038
- MD5 54a83d3668f871588c47cbfaace8d12c
- SHA1 3ae5e9825ed78149c26e0342a873eb97eabaf131
- SHA512 7ca2c719286f6e4da50d02cc71c3f354a9287022243c504b2b61c931865e8b55207201433136c064e535722476eae5fefe66c98c7148ebcdd0c79b269f0bc456
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigp:YwGtVfjTQSaoINAHTusMgDND4oqnDQ
- TLSH T182B4BF103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE