General
- Target 2026-10-19_390bddedc960b9a68cca94c8fde55ee0_elex_rhadamanthys_stealc_stop
- Size 523KB
- Sample261020-29ms7sdf28
- SHA256 646718f21ee7ceca1d773cdbfac20ed53c149be5de404c51f57ffc19c66ac7d2
- MD5 390bddedc960b9a68cca94c8fde55ee0
- SHA1 99266c40d53a73629aad960a2f431a9fdcfb51b2
- SHA512 85316bce02be1a61d584ef240a0c6496bb526ca35e8c48e3a2c28201c87f716edf825f3bfdfff29c24a6fd29cc17bc5ca82349601578c3ca53a86e001f974d5a
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigK:YwGtVfjTQSaoINAHTusMgDND4oqnDX
- TLSH T19AB4BF103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-19_390bddedc960b9a68cca94c8fde55ee0_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-10-19_390bddedc960b9a68cca94c8fde55ee0_elex_rhadamanthys_stealc_stop
- Size 523KB
- SHA256 646718f21ee7ceca1d773cdbfac20ed53c149be5de404c51f57ffc19c66ac7d2
- MD5 390bddedc960b9a68cca94c8fde55ee0
- SHA1 99266c40d53a73629aad960a2f431a9fdcfb51b2
- SHA512 85316bce02be1a61d584ef240a0c6496bb526ca35e8c48e3a2c28201c87f716edf825f3bfdfff29c24a6fd29cc17bc5ca82349601578c3ca53a86e001f974d5a
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigK:YwGtVfjTQSaoINAHTusMgDND4oqnDX
- TLSH T19AB4BF103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE