General
- Target 2026-09-30_fb998fab1268567fefd32374ccd35ec8_elex_rhadamanthys_stop
- Size 212KB
- Sample261001-bwpsjafa47
- SHA256 495fd1a81c789ae5983fa04742b75f11af0e823cd4674ec6147b1948394c6892
- MD5 fb998fab1268567fefd32374ccd35ec8
- SHA1 d67afabfc2e370041094c7351330aff53f2b6e57
- SHA512 4c7460ad9d332eae671dcb59a4a92c8d478a9700fd96ed2ffdff587549aac02399a77407d488f6da140329da8156e7c496800171426377bc5461250f2d07fbf8
- SSDEEP 3072:RAD80Wc7UJ6LZMaHLW65DEBppXmykmU9If3h1O4Eb/eONeorO:SVWc7UMLZ9qoEBpVmRXA3+4M/eONU
- TLSH T174245B1176008471F3590B364956FAE14969AC3D1AE8E88FF7787E365E322C39A7324F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-30_fb998fab1268567fefd32374ccd35ec8_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.208
-
112.175.88.207
Targets
-
- Target 2026-09-30_fb998fab1268567fefd32374ccd35ec8_elex_rhadamanthys_stop
- Size 212KB
- SHA256 495fd1a81c789ae5983fa04742b75f11af0e823cd4674ec6147b1948394c6892
- MD5 fb998fab1268567fefd32374ccd35ec8
- SHA1 d67afabfc2e370041094c7351330aff53f2b6e57
- SHA512 4c7460ad9d332eae671dcb59a4a92c8d478a9700fd96ed2ffdff587549aac02399a77407d488f6da140329da8156e7c496800171426377bc5461250f2d07fbf8
- SSDEEP 3072:RAD80Wc7UJ6LZMaHLW65DEBppXmykmU9If3h1O4Eb/eONeorO:SVWc7UMLZ9qoEBpVmRXA3+4M/eONU
- TLSH T174245B1176008471F3590B364956FAE14969AC3D1AE8E88FF7787E365E322C39A7324F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE