General
- Target 2026-08-06_dcb171c1f6f89ad0facd1517c847a999_elex_rhadamanthys_stealc_stop
- Size 525KB
- Sample260806-fretzstdme
- SHA256 1240475471050990c07bb3a586429b5e63c621faae8fc6758261c3963a5c9efd
- MD5 dcb171c1f6f89ad0facd1517c847a999
- SHA1 f92e17e05eddd6085d6e0e82811215e0e9c5c779
- SHA512 2a8e5a68c16d196ab7d0b9a431fa7313c20ea6600976984a102e1f3d94247b2449b0708243601fe0316f0cb4387cfa7685044d9f09ba3665779d2be4918fc761
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAig5:YwGtVfjTQSaoINAHTusMgDND4oqnDU
- TLSH T1B0B4BF1037908475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-06_dcb171c1f6f89ad0facd1517c847a999_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-06_dcb171c1f6f89ad0facd1517c847a999_elex_rhadamanthys_stealc_stop
- Size 525KB
- SHA256 1240475471050990c07bb3a586429b5e63c621faae8fc6758261c3963a5c9efd
- MD5 dcb171c1f6f89ad0facd1517c847a999
- SHA1 f92e17e05eddd6085d6e0e82811215e0e9c5c779
- SHA512 2a8e5a68c16d196ab7d0b9a431fa7313c20ea6600976984a102e1f3d94247b2449b0708243601fe0316f0cb4387cfa7685044d9f09ba3665779d2be4918fc761
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAig5:YwGtVfjTQSaoINAHTusMgDND4oqnDU
- TLSH T1B0B4BF1037908475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE