General
- Target 2026-08-27_f528d9838b3d04a4b274c0417bdae3c8_elex_rhadamanthys_stealc_stop
- Size 523KB
- Sample260828-bv39jasdkb
- SHA256 0ae3fd8ff6d8a2253da2d2af89e2829b544823ea1be26a7314aaf4010fede629
- MD5 f528d9838b3d04a4b274c0417bdae3c8
- SHA1 bb57a71c249f27fb3f6040ffa06c8b10ca5787ea
- SHA512 a20b6460b5a54bc81b7e1bf554c88d05f96f4ea55dbed60c1bf880f297d4d02e42f8581162fa415db638caeea5369ec54418101c38a476c4e98f2d6474a69370
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigv:YwGtVfjTQSaoINAHTusMgDND4oqnDa
- TLSH T152B4BE103790C475E3662B310896E6F009B9BC385AA5D68FF7A47E3A5E311938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-27_f528d9838b3d04a4b274c0417bdae3c8_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-27_f528d9838b3d04a4b274c0417bdae3c8_elex_rhadamanthys_stealc_stop
- Size 523KB
- SHA256 0ae3fd8ff6d8a2253da2d2af89e2829b544823ea1be26a7314aaf4010fede629
- MD5 f528d9838b3d04a4b274c0417bdae3c8
- SHA1 bb57a71c249f27fb3f6040ffa06c8b10ca5787ea
- SHA512 a20b6460b5a54bc81b7e1bf554c88d05f96f4ea55dbed60c1bf880f297d4d02e42f8581162fa415db638caeea5369ec54418101c38a476c4e98f2d6474a69370
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigv:YwGtVfjTQSaoINAHTusMgDND4oqnDa
- TLSH T152B4BE103790C475E3662B310896E6F009B9BC385AA5D68FF7A47E3A5E311938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Stealc stealer Version 3
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE