General
- Target 2026-08-15_6112b9c5d21c0f2f48920ebc0e022de2_elex_rhadamanthys_stop
- Size 1.6MB
- Sample260816-dcvwjsah79
- SHA256 af25f4f0c0aca96af1aee0ede3125338e075d0bf0956252d26989441a91fe336
- MD5 6112b9c5d21c0f2f48920ebc0e022de2
- SHA1 ab9793cfcab3a863a1ed61900444e1bd9df7a5c1
- SHA512 6b62f9a37c13dd158e701fed6d5302569292f5c1e269c306b6739ae466c05b25d850458081cbb6d33f0c8469dc1559a6096d9e8fa15f91e20870732bb8b61948
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mOx:Qx9GzHlTv/b35tecFB6x
- TLSH T192853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_6112b9c5d21c0f2f48920ebc0e022de2_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-08-15_6112b9c5d21c0f2f48920ebc0e022de2_elex_rhadamanthys_stop
- Size 1.6MB
- SHA256 af25f4f0c0aca96af1aee0ede3125338e075d0bf0956252d26989441a91fe336
- MD5 6112b9c5d21c0f2f48920ebc0e022de2
- SHA1 ab9793cfcab3a863a1ed61900444e1bd9df7a5c1
- SHA512 6b62f9a37c13dd158e701fed6d5302569292f5c1e269c306b6739ae466c05b25d850458081cbb6d33f0c8469dc1559a6096d9e8fa15f91e20870732bb8b61948
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mOx:Qx9GzHlTv/b35tecFB6x
- TLSH T192853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE