General
- Target 2026-10-02_3ada1d25b53fb3ba6306004645f6a2de_elex_rhadamanthys_stealc_stop
- Size 523KB
- Sample261003-rn3mes1w6j
- SHA256 46c21e1a99921a6ea16b1d44e45187453be6dae7a63a6b8fbf495aff892878af
- MD5 3ada1d25b53fb3ba6306004645f6a2de
- SHA1 5e4c1021105831b644b30e670d0944235ef59d42
- SHA512 69143755b3222302fe06e0288080efe544c2091a1354a612167740c0f0e8b03ccb3b9a3da403ac40985513933864cf91e81a9d69ef8141c0e5c9409810a07cc2
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigF:YwGtVfjTQSaoINAHTusMgDND4oqnDY
- TLSH T1A5B4BE103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-02_3ada1d25b53fb3ba6306004645f6a2de_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-10-02_3ada1d25b53fb3ba6306004645f6a2de_elex_rhadamanthys_stealc_stop
- Size 523KB
- SHA256 46c21e1a99921a6ea16b1d44e45187453be6dae7a63a6b8fbf495aff892878af
- MD5 3ada1d25b53fb3ba6306004645f6a2de
- SHA1 5e4c1021105831b644b30e670d0944235ef59d42
- SHA512 69143755b3222302fe06e0288080efe544c2091a1354a612167740c0f0e8b03ccb3b9a3da403ac40985513933864cf91e81a9d69ef8141c0e5c9409810a07cc2
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigF:YwGtVfjTQSaoINAHTusMgDND4oqnDY
- TLSH T1A5B4BE103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE