General
- Target 2026-10-13_2aad91faa6799b53c7eecca8fe4fe653_elex_rhadamanthys_stealc_stop
- Size 523KB
- Sample261015-vsctcaat7w
- SHA256 f2464f006a5d304adcd2a5a4e39eb88bf8294762ba292fd0f0861253d07a3c8b
- MD5 2aad91faa6799b53c7eecca8fe4fe653
- SHA1 9aed47edae6d2bde5f5be5e0511ec0163d4a5410
- SHA512 517f04391883b9d4ca26af144999773f2c8b7b9e00535cc183b0cfb367e04716132ba605cfda720854dc061b89d84364ed175df662f476196414e48926cbe80f
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigw:YwGtVfjTQSaoINAHTusMgDND4oqnDF
- TLSH T1DFB4BE103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-13_2aad91faa6799b53c7eecca8fe4fe653_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-10-13_2aad91faa6799b53c7eecca8fe4fe653_elex_rhadamanthys_stealc_stop
- Size 523KB
- SHA256 f2464f006a5d304adcd2a5a4e39eb88bf8294762ba292fd0f0861253d07a3c8b
- MD5 2aad91faa6799b53c7eecca8fe4fe653
- SHA1 9aed47edae6d2bde5f5be5e0511ec0163d4a5410
- SHA512 517f04391883b9d4ca26af144999773f2c8b7b9e00535cc183b0cfb367e04716132ba605cfda720854dc061b89d84364ed175df662f476196414e48926cbe80f
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigw:YwGtVfjTQSaoINAHTusMgDND4oqnDF
- TLSH T1DFB4BE103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE