General
- Target 2026-08-25_eb540828442c8956c25a0e17c34c4e2f_elex_rhadamanthys_stealc_stop
- Size 525KB
- Sample260826-edjeksyvhs
- SHA256 cbe0103c5df24fb46a7a5706064eaedfee5845b30fd65f62a78d3354be704dcb
- MD5 eb540828442c8956c25a0e17c34c4e2f
- SHA1 e42c1dabd47cc34567ceaafdf46dcc9bf8fa605d
- SHA512 056eb0d0b34017fe58ba3a420705deb7ddc9ae6ed7d153f347f2dc8e3f68938de7f87183730e31fb5f9067160f6397ef126d6b830e538f41475d2d1d0e455578
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigO:YwGtVfjTQSaoINAHTusMgDND4oqnDj
- TLSH T123B4BF103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-25_eb540828442c8956c25a0e17c34c4e2f_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-25_eb540828442c8956c25a0e17c34c4e2f_elex_rhadamanthys_stealc_stop
- Size 525KB
- SHA256 cbe0103c5df24fb46a7a5706064eaedfee5845b30fd65f62a78d3354be704dcb
- MD5 eb540828442c8956c25a0e17c34c4e2f
- SHA1 e42c1dabd47cc34567ceaafdf46dcc9bf8fa605d
- SHA512 056eb0d0b34017fe58ba3a420705deb7ddc9ae6ed7d153f347f2dc8e3f68938de7f87183730e31fb5f9067160f6397ef126d6b830e538f41475d2d1d0e455578
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigO:YwGtVfjTQSaoINAHTusMgDND4oqnDj
- TLSH T123B4BF103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE