General
- Target 2026-08-12_309e4981cdbbbc332bf806a514cb3392_elex_rhadamanthys_stop
- Size 1.6MB
- Sample260813-bw1j2aygrb
- SHA256 e5ca1c2eef5734095b06323bbc72e4b53d94562b736c8a4203a37522519258e7
- MD5 309e4981cdbbbc332bf806a514cb3392
- SHA1 f4f307db97ec5674bb7f5c51ae02bfed8dee1d15
- SHA512 1eda1f299963be92d1cb8143e6355e8f9ac9b09a709cdf29dee4d3c19f2725ebc01792fade33f554eebc4fa689f4ca34078148d28c96a2e65be32e6746ea65bc
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mOE:Qx9GzHlTv/b35tecFB6E
- TLSH T1B5853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_309e4981cdbbbc332bf806a514cb3392_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-08-12_309e4981cdbbbc332bf806a514cb3392_elex_rhadamanthys_stop
- Size 1.6MB
- SHA256 e5ca1c2eef5734095b06323bbc72e4b53d94562b736c8a4203a37522519258e7
- MD5 309e4981cdbbbc332bf806a514cb3392
- SHA1 f4f307db97ec5674bb7f5c51ae02bfed8dee1d15
- SHA512 1eda1f299963be92d1cb8143e6355e8f9ac9b09a709cdf29dee4d3c19f2725ebc01792fade33f554eebc4fa689f4ca34078148d28c96a2e65be32e6746ea65bc
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mOE:Qx9GzHlTv/b35tecFB6E
- TLSH T1B5853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE