General
- Target 2026-08-12_62de478ca27f302f216ca2f80b2c6821_elex_rhadamanthys_stop
- Size 1.6MB
- Sample260812-2bsa2afb57
- SHA256 c0447b60baf1da7880ccb6096e64222b0bf21078b3dfff11dbd4fedc082b576e
- MD5 62de478ca27f302f216ca2f80b2c6821
- SHA1 65feb74f9aa3bb722310d55ca48835e547842ddd
- SHA512 a392af7c34b13820042d285626f8d91ae93565496a2063b60dffe06306e609d1ae9cbd98a46fe0a91dbb2f132d447103dea8e318ea2b600483dbc608100ee3aa
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mOf:Qx9GzHlTv/b35tecFB6f
- TLSH T13D853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_62de478ca27f302f216ca2f80b2c6821_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-08-12_62de478ca27f302f216ca2f80b2c6821_elex_rhadamanthys_stop
- Size 1.6MB
- SHA256 c0447b60baf1da7880ccb6096e64222b0bf21078b3dfff11dbd4fedc082b576e
- MD5 62de478ca27f302f216ca2f80b2c6821
- SHA1 65feb74f9aa3bb722310d55ca48835e547842ddd
- SHA512 a392af7c34b13820042d285626f8d91ae93565496a2063b60dffe06306e609d1ae9cbd98a46fe0a91dbb2f132d447103dea8e318ea2b600483dbc608100ee3aa
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mOf:Qx9GzHlTv/b35tecFB6f
- TLSH T13D853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE