General
- Target 2026-08-14_e38d9bcf295fa7d5899fecabb4b6c576_elex_rhadamanthys_stop
- Size 1.6MB
- Sample260814-pfhk6ssfpg
- SHA256 81ecd0c6a5bf6fac04d6b5a70a5585c52a695f5a38fc43b1c3b2b741f27fdfe5
- MD5 e38d9bcf295fa7d5899fecabb4b6c576
- SHA1 2a5d7b25cd655eb52df637659c94628fc65304c2
- SHA512 3ab486132736ad62cc8fa1190c8048ab7f7239cbd8c4b21b85054af4b63de3f707c8145be085ae9a9d3e7b8e3ec824cb760e1447705f1ecb7373836fcd4cca97
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mOf:Qx9GzHlTv/b35tecFB6f
- TLSH T1A9853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_e38d9bcf295fa7d5899fecabb4b6c576_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-08-14_e38d9bcf295fa7d5899fecabb4b6c576_elex_rhadamanthys_stop
- Size 1.6MB
- SHA256 81ecd0c6a5bf6fac04d6b5a70a5585c52a695f5a38fc43b1c3b2b741f27fdfe5
- MD5 e38d9bcf295fa7d5899fecabb4b6c576
- SHA1 2a5d7b25cd655eb52df637659c94628fc65304c2
- SHA512 3ab486132736ad62cc8fa1190c8048ab7f7239cbd8c4b21b85054af4b63de3f707c8145be085ae9a9d3e7b8e3ec824cb760e1447705f1ecb7373836fcd4cca97
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mOf:Qx9GzHlTv/b35tecFB6f
- TLSH T1A9853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE