General
- Target 2026-08-03_3922aa56ed53673652a9be5cf8686ed4_elex_rhadamanthys_stealc_stop
- Size 517KB
- Sample260803-n876vsxamd
- SHA256 369cf144d03ca919e8f104c891cec0a7fcacff013fea86e5215e76ec548915f7
- MD5 3922aa56ed53673652a9be5cf8686ed4
- SHA1 2e82c4f4606ccea002aeb6bd12f87309ee68b2d0
- SHA512 3ca1252fa24ebe02f65e536143e039206f0defdb680141729bf728310d04810bc206c327b56bcd21450f66b3a04ed9a328521b4e6cb24b75c3fc29bb4f8873d0
- SSDEEP 12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKo2dW:3MUv2LAv9AQ1p4dKf0
- TLSH T1F9B4BE1036908435F36A27354996E6F40A797C385AA4E58FF7A43E3A5E312D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_3922aa56ed53673652a9be5cf8686ed4_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
-
218.54.31.166
Targets
-
- Target 2026-08-03_3922aa56ed53673652a9be5cf8686ed4_elex_rhadamanthys_stealc_stop
- Size 517KB
- SHA256 369cf144d03ca919e8f104c891cec0a7fcacff013fea86e5215e76ec548915f7
- MD5 3922aa56ed53673652a9be5cf8686ed4
- SHA1 2e82c4f4606ccea002aeb6bd12f87309ee68b2d0
- SHA512 3ca1252fa24ebe02f65e536143e039206f0defdb680141729bf728310d04810bc206c327b56bcd21450f66b3a04ed9a328521b4e6cb24b75c3fc29bb4f8873d0
- SSDEEP 12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKo2dW:3MUv2LAv9AQ1p4dKf0
- TLSH T1F9B4BE1036908435F36A27354996E6F40A797C385AA4E58FF7A43E3A5E312D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE