General
- Target 2026-10-27_f4ddcfa70d37fc05c26619e87c623678_elex_rhadamanthys_stop
- Size 467KB
- Sample261027-1fysyaee43
- SHA256 bb065a9276659bc2c9a3ac98260c9b0e26a7fa85d4fab0d7aa2991c4611f6e7e
- MD5 f4ddcfa70d37fc05c26619e87c623678
- SHA1 d5c93192e57ce6c57b981ea5d81c79c8efd2c094
- SHA512 442bc81290d661cc44c1b7e5efb2ba376397cffe1fc9517c58711e57e5ed31d54d65be2e6b10795208f1b89165f5e564ef7ad2b488f60b6b5087cd2f0dd2bdcc
- SSDEEP 12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mnJ:9x9GzHlTv/b35tecFB6w
- TLSH T199A4CF113A80C472E36627750996E6F11AAABC3849A4D28FFB787F395D311934A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-27_f4ddcfa70d37fc05c26619e87c623678_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-27_f4ddcfa70d37fc05c26619e87c623678_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-10-27_f4ddcfa70d37fc05c26619e87c623678_elex_rhadamanthys_stop
- Size 467KB
- SHA256 bb065a9276659bc2c9a3ac98260c9b0e26a7fa85d4fab0d7aa2991c4611f6e7e
- MD5 f4ddcfa70d37fc05c26619e87c623678
- SHA1 d5c93192e57ce6c57b981ea5d81c79c8efd2c094
- SHA512 442bc81290d661cc44c1b7e5efb2ba376397cffe1fc9517c58711e57e5ed31d54d65be2e6b10795208f1b89165f5e564ef7ad2b488f60b6b5087cd2f0dd2bdcc
- SSDEEP 12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mnJ:9x9GzHlTv/b35tecFB6w
- TLSH T199A4CF113A80C472E36627750996E6F11AAABC3849A4D28FFB787F395D311934A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE