General
- Target 2026-08-11_4298e249516f85c82c98b463e3fea7d1_elex_rhadamanthys_stop
- Size 1.6MB
- Sample260811-ztv4jayvft
- SHA256 54c3ed19965115ce01862d1d749232506a28a34b64ac084eb17a2a6281f4379b
- MD5 4298e249516f85c82c98b463e3fea7d1
- SHA1 7a2b5f6e507efecff431ccfd40b6dda64beb8ab0
- SHA512 23ab44772d7c0f4629487468fadbc29c59c031f1afcc9f87ee0edb7bd2ffe4fd09258f5b4415e4006a859098e60e262dde040eb8b50a16b4b522620b33a825dd
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mOR:Qx9GzHlTv/b35tecFB6R
- TLSH T1E1853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-11_4298e249516f85c82c98b463e3fea7d1_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-08-11_4298e249516f85c82c98b463e3fea7d1_elex_rhadamanthys_stop
- Size 1.6MB
- SHA256 54c3ed19965115ce01862d1d749232506a28a34b64ac084eb17a2a6281f4379b
- MD5 4298e249516f85c82c98b463e3fea7d1
- SHA1 7a2b5f6e507efecff431ccfd40b6dda64beb8ab0
- SHA512 23ab44772d7c0f4629487468fadbc29c59c031f1afcc9f87ee0edb7bd2ffe4fd09258f5b4415e4006a859098e60e262dde040eb8b50a16b4b522620b33a825dd
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mOR:Qx9GzHlTv/b35tecFB6R
- TLSH T1E1853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE