General
- Target 2026-10-22_4b8722b4814ec69fdfae8f1b02fb73db_elex_rhadamanthys_stealc_stop
- Size 525KB
- Sample261024-rb6hjsb19l
- SHA256 3400f0dac32e8c891c7f463b0f2dbb777c48fb95aa7c2b654899b5674021ca8e
- MD5 4b8722b4814ec69fdfae8f1b02fb73db
- SHA1 c9c136fd2934b18a1ed48367817df6f0957dbe18
- SHA512 d8bdf86f150cc135095dab8c71428eb96715ff66f2122a40cfbf9cb3f70ed6d4d33a3e8898e601ae04ef4e4df7164ed05f6d98090e22f6c4257a0ea18bd757b2
- SSDEEP 12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKo2iq:3MUv2LAv9AQ1p4dKfF
- TLSH T169B4CF1076908436F37627354896E6F40A797C385AA4E58FF6A43E3A5E312D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-22_4b8722b4814ec69fdfae8f1b02fb73db_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
-
218.54.31.166
Targets
-
- Target 2026-10-22_4b8722b4814ec69fdfae8f1b02fb73db_elex_rhadamanthys_stealc_stop
- Size 525KB
- SHA256 3400f0dac32e8c891c7f463b0f2dbb777c48fb95aa7c2b654899b5674021ca8e
- MD5 4b8722b4814ec69fdfae8f1b02fb73db
- SHA1 c9c136fd2934b18a1ed48367817df6f0957dbe18
- SHA512 d8bdf86f150cc135095dab8c71428eb96715ff66f2122a40cfbf9cb3f70ed6d4d33a3e8898e601ae04ef4e4df7164ed05f6d98090e22f6c4257a0ea18bd757b2
- SSDEEP 12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKo2iq:3MUv2LAv9AQ1p4dKfF
- TLSH T169B4CF1076908436F37627354896E6F40A797C385AA4E58FF6A43E3A5E312D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE