General
- Target 2026-08-03_2668a2d3fc0d437e77290164ce7525bc_elex_rhadamanthys_stop
- Size 1.6MB
- Sample260804-dpyszafk6x
- SHA256 91203b75e41ca47dfd2b7e780aea56c207a65d15a02a5744b3700f876f45e786
- MD5 2668a2d3fc0d437e77290164ce7525bc
- SHA1 7895d043a634fc8a464edc27bab0ceac3a3479d4
- SHA512 1ad8e0e7084935ef0cb582b27419c58006d5b41f55cf720264788ad2dc3f2ddd6a05d2a32b919d71cfba74d8c44d580676c2b5a281dd6419be1caa71bea0feec
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mA:Qx9GzHlTv/b35tecFB6L
- TLSH T1C8853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_2668a2d3fc0d437e77290164ce7525bc_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-08-03_2668a2d3fc0d437e77290164ce7525bc_elex_rhadamanthys_stop
- Size 1.6MB
- SHA256 91203b75e41ca47dfd2b7e780aea56c207a65d15a02a5744b3700f876f45e786
- MD5 2668a2d3fc0d437e77290164ce7525bc
- SHA1 7895d043a634fc8a464edc27bab0ceac3a3479d4
- SHA512 1ad8e0e7084935ef0cb582b27419c58006d5b41f55cf720264788ad2dc3f2ddd6a05d2a32b919d71cfba74d8c44d580676c2b5a281dd6419be1caa71bea0feec
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mA:Qx9GzHlTv/b35tecFB6L
- TLSH T1C8853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE