General
- Target 2026-10-28_7b7ef860b4ef7b8ef5bf2f6cbfd4701a_elex_rhadamanthys_stealc_stop
- Size 523KB
- Sample261028-l3ma4azybv
- SHA256 2574cceccc5edeca10f9140a1b3cbccd1d924517eaf310f46f26b1c7f2449315
- MD5 7b7ef860b4ef7b8ef5bf2f6cbfd4701a
- SHA1 1fe86c608234197ea4959f79ba58469197dce703
- SHA512 a07eeaaff770e28f4c4191c7fe9b8b91cad544e69d6ec2fa6289b09645a54c43d802b958d1ade7c0c0a732ebd226877571b15cab652e675b4c420addf17d2bd1
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAig+:YwGtVfjTQSaoINAHTusMgDND4oqnD/
- TLSH T14CB4BE103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-28_7b7ef860b4ef7b8ef5bf2f6cbfd4701a_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-10-28_7b7ef860b4ef7b8ef5bf2f6cbfd4701a_elex_rhadamanthys_stealc_stop
- Size 523KB
- SHA256 2574cceccc5edeca10f9140a1b3cbccd1d924517eaf310f46f26b1c7f2449315
- MD5 7b7ef860b4ef7b8ef5bf2f6cbfd4701a
- SHA1 1fe86c608234197ea4959f79ba58469197dce703
- SHA512 a07eeaaff770e28f4c4191c7fe9b8b91cad544e69d6ec2fa6289b09645a54c43d802b958d1ade7c0c0a732ebd226877571b15cab652e675b4c420addf17d2bd1
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAig+:YwGtVfjTQSaoINAHTusMgDND4oqnD/
- TLSH T14CB4BE103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE