General
- Target 2026-10-26_781b98d013ed67439e45a4b9d8a5da15_elex_rhadamanthys_stealc_stop
- Size 523KB
- Sample261027-rfjvcass9r
- SHA256 fd4b0eeaee3a4412a622ed55cef0beb00e785551c615359c53d1e1d94071f221
- MD5 781b98d013ed67439e45a4b9d8a5da15
- SHA1 d2330b47e7d2937a41f6dff5f524277754aa109b
- SHA512 57d004b1ac573ead01c1c4b5641b46e9a3fc8fe1562f3a945926417b04368d9d97d272a261bd647a14ac2ad31c69a2822ef9fdbedd896b73a5c27e265963a31c
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigw:YwGtVfjTQSaoINAHTusMgDND4oqnDl
- TLSH T175B4BF103790C475E366273108A6E6F009B9BC385AA5D68FF7A47E3A5E311938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-26_781b98d013ed67439e45a4b9d8a5da15_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-10-26_781b98d013ed67439e45a4b9d8a5da15_elex_rhadamanthys_stealc_stop
- Size 523KB
- SHA256 fd4b0eeaee3a4412a622ed55cef0beb00e785551c615359c53d1e1d94071f221
- MD5 781b98d013ed67439e45a4b9d8a5da15
- SHA1 d2330b47e7d2937a41f6dff5f524277754aa109b
- SHA512 57d004b1ac573ead01c1c4b5641b46e9a3fc8fe1562f3a945926417b04368d9d97d272a261bd647a14ac2ad31c69a2822ef9fdbedd896b73a5c27e265963a31c
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigw:YwGtVfjTQSaoINAHTusMgDND4oqnDl
- TLSH T175B4BF103790C475E366273108A6E6F009B9BC385AA5D68FF7A47E3A5E311938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE