General
- Target 2026-09-24_903449bbf9f106b8348837edbc780ee4_elex_rhadamanthys_stop
- Size 211KB
- Sample260925-ffrdmsyt4j
- SHA256 5e89d5f3425088390b67bfd85b2de6ce6d18a4d78077b43671e5b13d0060e0b1
- MD5 903449bbf9f106b8348837edbc780ee4
- SHA1 b9b14435a3a2b4302c8786c803a8ab51ff6716f7
- SHA512 a4a719cc2825e930a36c4132ccf2324897a353c353d0c949b465b131febdba86f33cfc79ccb2e46e2f969a88aeb22918e0d47d08c4b74de55b10fae9cfc481a3
- SSDEEP 3072:jADM0Wc7UJ6LZMaHLW65DEW9knX9eRN3BN3nKN71wSGHu:8FWc7UMLZ9qoEW9kntCNXfSqu
- TLSH T1AC248D103640C471E3591732455AEBE18969AD3D1BA9E88FF7A83E355E322C3D67328F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-24_903449bbf9f106b8348837edbc780ee4_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.208
-
112.175.88.207
Targets
-
- Target 2026-09-24_903449bbf9f106b8348837edbc780ee4_elex_rhadamanthys_stop
- Size 211KB
- SHA256 5e89d5f3425088390b67bfd85b2de6ce6d18a4d78077b43671e5b13d0060e0b1
- MD5 903449bbf9f106b8348837edbc780ee4
- SHA1 b9b14435a3a2b4302c8786c803a8ab51ff6716f7
- SHA512 a4a719cc2825e930a36c4132ccf2324897a353c353d0c949b465b131febdba86f33cfc79ccb2e46e2f969a88aeb22918e0d47d08c4b74de55b10fae9cfc481a3
- SSDEEP 3072:jADM0Wc7UJ6LZMaHLW65DEW9knX9eRN3BN3nKN71wSGHu:8FWc7UMLZ9qoEW9kntCNXfSqu
- TLSH T1AC248D103640C471E3591732455AEBE18969AD3D1BA9E88FF7A83E355E322C3D67328F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE