General
- Target 2026-10-19_c7bbe1e890e8bab1fbd5618b1692138d_elex_rhadamanthys_stop
- Size 1.6MB
- Sample261020-lxrcvsyscw
- SHA256 af5636eed6c1588096e41c17d8516407f34953bf3dc708cf8c924b13b7a6f6b4
- MD5 c7bbe1e890e8bab1fbd5618b1692138d
- SHA1 ab09a0741d6dd4cde5f907a1da1b4dc7e41ed6e7
- SHA512 ac5da170140bd0f1db98f91070e0d98eeeb51ee143f51e7bc35a026f10bdb0949e0f08b9c9e62840477b807dac3935fb99cadbe860431370d40a35774f7531b1
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mj:Qx9GzHlTv/b35tecFB60
- TLSH T1AF853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-19_c7bbe1e890e8bab1fbd5618b1692138d_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-19_c7bbe1e890e8bab1fbd5618b1692138d_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-10-19_c7bbe1e890e8bab1fbd5618b1692138d_elex_rhadamanthys_stop
- Size 1.6MB
- SHA256 af5636eed6c1588096e41c17d8516407f34953bf3dc708cf8c924b13b7a6f6b4
- MD5 c7bbe1e890e8bab1fbd5618b1692138d
- SHA1 ab09a0741d6dd4cde5f907a1da1b4dc7e41ed6e7
- SHA512 ac5da170140bd0f1db98f91070e0d98eeeb51ee143f51e7bc35a026f10bdb0949e0f08b9c9e62840477b807dac3935fb99cadbe860431370d40a35774f7531b1
- SSDEEP 12288:Q3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mj:Qx9GzHlTv/b35tecFB60
- TLSH T1AF853811156AF321EA912630887EB158C5A5BCA487FC51FBBD5C3AE4C733BE3753A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE