General
- Target 2026-08-19_3380202411b76cdb2fde51a46c58a1af_elex_rhadamanthys_stop
- Size 1.6MB
- Sample260819-22746sbk91
- SHA256 7ff6f21424e258bb0ebdf0245af12c591903dbbfd5811b083b46aad306954ba8
- MD5 3380202411b76cdb2fde51a46c58a1af
- SHA1 3bec2ca9d29e1abf166b6a75eea8eff58a5d0e1c
- SHA512 2496bcfa02eb451f3be706b35a7431c7fe554cf56a75013fd118cc27fd8ae903e79407954bc7ce24c244d7ef258999b35493fd32f20a4b20dcf9f9ce0de835a4
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mOV:Qx9GzHlTv/b35tecFB6V
- TLSH T15D853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_3380202411b76cdb2fde51a46c58a1af_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-08-19_3380202411b76cdb2fde51a46c58a1af_elex_rhadamanthys_stop
- Size 1.6MB
- SHA256 7ff6f21424e258bb0ebdf0245af12c591903dbbfd5811b083b46aad306954ba8
- MD5 3380202411b76cdb2fde51a46c58a1af
- SHA1 3bec2ca9d29e1abf166b6a75eea8eff58a5d0e1c
- SHA512 2496bcfa02eb451f3be706b35a7431c7fe554cf56a75013fd118cc27fd8ae903e79407954bc7ce24c244d7ef258999b35493fd32f20a4b20dcf9f9ce0de835a4
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mOV:Qx9GzHlTv/b35tecFB6V
- TLSH T15D853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE