General
- Target 2026-07-27_f24b985a8dd3c4ac9d90b2fae3aa11a6_elex_rhadamanthys_stealc_stop
- Size 525KB
- Sample260727-gr5abahn8x
- SHA256 564de45a59fd61873f0aa2694af2f4aeb5c5b0850c3d48b72d255b7dc6f116be
- MD5 f24b985a8dd3c4ac9d90b2fae3aa11a6
- SHA1 a27d34f246a774414be257ae3e15967d458a54f8
- SHA512 ac0adce8cde6bd008128f0d103f3317b67d0ee244e11fca5c4cb47079912998ef0afe93676f379d29a2457c509ed2705869ca1115883ccd3cc49069c099c69e1
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigk:YwGtVfjTQSaoINAHTusMgDND4oqnD9
- TLSH T1CBB4BF103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-27_f24b985a8dd3c4ac9d90b2fae3aa11a6_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-07-27_f24b985a8dd3c4ac9d90b2fae3aa11a6_elex_rhadamanthys_stealc_stop
- Size 525KB
- SHA256 564de45a59fd61873f0aa2694af2f4aeb5c5b0850c3d48b72d255b7dc6f116be
- MD5 f24b985a8dd3c4ac9d90b2fae3aa11a6
- SHA1 a27d34f246a774414be257ae3e15967d458a54f8
- SHA512 ac0adce8cde6bd008128f0d103f3317b67d0ee244e11fca5c4cb47079912998ef0afe93676f379d29a2457c509ed2705869ca1115883ccd3cc49069c099c69e1
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigk:YwGtVfjTQSaoINAHTusMgDND4oqnD9
- TLSH T1CBB4BF103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE