General
- Target 2026-08-03_d623eab641ed2bf39ae0108585b127b3_elex_rhadamanthys_stop
- Size 1.6MB
- Sample260804-lfpgyasvbz
- SHA256 a471c795f1680904e7962c94ac8e84865fca3fb8f6306a6f6e29760464a277cd
- MD5 d623eab641ed2bf39ae0108585b127b3
- SHA1 f216aa8f30413ad4d2f76ed502b1b4180d93cf98
- SHA512 0a7df252be93d11f9a10023fbf00eafc179d3313c10348f3bfbce480f0214f41f1a3fc345b3608c45d53087af910704ff444f007e195268d84de744441c44923
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mo:Qx9GzHlTv/b35tecFB6r
- TLSH T1C9853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_d623eab641ed2bf39ae0108585b127b3_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-08-03_d623eab641ed2bf39ae0108585b127b3_elex_rhadamanthys_stop
- Size 1.6MB
- SHA256 a471c795f1680904e7962c94ac8e84865fca3fb8f6306a6f6e29760464a277cd
- MD5 d623eab641ed2bf39ae0108585b127b3
- SHA1 f216aa8f30413ad4d2f76ed502b1b4180d93cf98
- SHA512 0a7df252be93d11f9a10023fbf00eafc179d3313c10348f3bfbce480f0214f41f1a3fc345b3608c45d53087af910704ff444f007e195268d84de744441c44923
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mo:Qx9GzHlTv/b35tecFB6r
- TLSH T1C9853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE