General
- Target 2026-10-28_76cd81a06ad430f2b9f21c76d0ae14d9_elex_rhadamanthys_stealc_stop
- Size 525KB
- Sample261028-mcfajabv7w
- SHA256 3084cf46d35b075d53f1be734ae69347e01b678a0f02a5b22a584760c737e51d
- MD5 76cd81a06ad430f2b9f21c76d0ae14d9
- SHA1 d8a767ef778d9b745374a334c6c17883a49a07ea
- SHA512 827533fe8651270f94bc3317070d230fb079a64e9429b249a472e450e3990da51fc00e29f42fd9dc3d08ef1cde173328bfe207194bc4ec68de682d2afd43134c
- SSDEEP 12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK52iT:PMUv2LAv9AQ1p4dK4M
- TLSH T1C0B4CF1076908435F37A27354896E6F40A797C385AA4E58FF6A43E3A5E312D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-28_76cd81a06ad430f2b9f21c76d0ae14d9_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
-
218.54.31.166
Targets
-
- Target 2026-10-28_76cd81a06ad430f2b9f21c76d0ae14d9_elex_rhadamanthys_stealc_stop
- Size 525KB
- SHA256 3084cf46d35b075d53f1be734ae69347e01b678a0f02a5b22a584760c737e51d
- MD5 76cd81a06ad430f2b9f21c76d0ae14d9
- SHA1 d8a767ef778d9b745374a334c6c17883a49a07ea
- SHA512 827533fe8651270f94bc3317070d230fb079a64e9429b249a472e450e3990da51fc00e29f42fd9dc3d08ef1cde173328bfe207194bc4ec68de682d2afd43134c
- SSDEEP 12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK52iT:PMUv2LAv9AQ1p4dK4M
- TLSH T1C0B4CF1076908435F37A27354896E6F40A797C385AA4E58FF6A43E3A5E312D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE