General
- Target 2026-08-19_11f7efdc24e95909ebe8c06343b33799_elex_rhadamanthys_stop
- Size 1.6MB
- Sample260819-3ayl4aab86
- SHA256 ecbee2d57c22a572f195a24eb73d3cd7bce911fd9dacae9a6a5daf473125d1b8
- MD5 11f7efdc24e95909ebe8c06343b33799
- SHA1 daa2dd1b0995e39e09ded24190ff0d7ff7f8a96c
- SHA512 96edba594cfef58697166fc9435360ad1633a76f412eb353a881f91807f976c06c33fc286883a7c614ad874a329d6ed35aec9b4e3ac5a1d3ca9183d7d4f69845
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mOP:Qx9GzHlTv/b35tecFB6P
- TLSH T17C853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_11f7efdc24e95909ebe8c06343b33799_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-08-19_11f7efdc24e95909ebe8c06343b33799_elex_rhadamanthys_stop
- Size 1.6MB
- SHA256 ecbee2d57c22a572f195a24eb73d3cd7bce911fd9dacae9a6a5daf473125d1b8
- MD5 11f7efdc24e95909ebe8c06343b33799
- SHA1 daa2dd1b0995e39e09ded24190ff0d7ff7f8a96c
- SHA512 96edba594cfef58697166fc9435360ad1633a76f412eb353a881f91807f976c06c33fc286883a7c614ad874a329d6ed35aec9b4e3ac5a1d3ca9183d7d4f69845
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mOP:Qx9GzHlTv/b35tecFB6P
- TLSH T17C853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE