General
- Target 2026-08-27_d68c82ddba3e1c7d6e26b5368c820e79_elex_rhadamanthys_stop
- Size 1.6MB
- Sample260827-jexe2sen4v
- SHA256 da764167ace2410cc4363781b028f789124a34db2926ebace9b1aa6d00c811a1
- MD5 d68c82ddba3e1c7d6e26b5368c820e79
- SHA1 f9bbf5ff9f79ab6d9513a1b1f8a366816efa629b
- SHA512 3df96909af54be98145bc99b12dfb515a58be2a79a388c4356b81d1e9ced1a581c15c65a705c7f7a70d57666adf831347b3051d44bb268242451a025e2ee7346
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mC:Qx9GzHlTv/b35tecFB6h
- TLSH T1D8853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-27_d68c82ddba3e1c7d6e26b5368c820e79_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-08-27_d68c82ddba3e1c7d6e26b5368c820e79_elex_rhadamanthys_stop
- Size 1.6MB
- SHA256 da764167ace2410cc4363781b028f789124a34db2926ebace9b1aa6d00c811a1
- MD5 d68c82ddba3e1c7d6e26b5368c820e79
- SHA1 f9bbf5ff9f79ab6d9513a1b1f8a366816efa629b
- SHA512 3df96909af54be98145bc99b12dfb515a58be2a79a388c4356b81d1e9ced1a581c15c65a705c7f7a70d57666adf831347b3051d44bb268242451a025e2ee7346
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mC:Qx9GzHlTv/b35tecFB6h
- TLSH T1D8853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE