General
- Target 2026-10-30_a3e3640c40f332ee3ac60cfa73a87b48_elex_rhadamanthys_stop
- Size 467KB
- Sample261031-1rvknazzds
- SHA256 87a4ccbf82cd2a1af6522ff73103cc4d9b2710f8dded65406be03defb65e2e08
- MD5 a3e3640c40f332ee3ac60cfa73a87b48
- SHA1 8add5977576174d82196d4486c30e89c66875a98
- SHA512 567d67a6cd394492f607496b6d0c9cdaf4fe6bdc844e1f45af9fa62419f42cb61e785fc22f0611a3d8b9cf9602db438688aa21472e154baab2a7371b161b4363
- SSDEEP 12288:j3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mX:jx9GzHlTv/b35tecFB6+
- TLSH T1E7A4CF153680C472E36627750996E6F01AAABC3849A4D28FFB787F395D311934A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-30_a3e3640c40f332ee3ac60cfa73a87b48_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-30_a3e3640c40f332ee3ac60cfa73a87b48_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-10-30_a3e3640c40f332ee3ac60cfa73a87b48_elex_rhadamanthys_stop
- Size 467KB
- SHA256 87a4ccbf82cd2a1af6522ff73103cc4d9b2710f8dded65406be03defb65e2e08
- MD5 a3e3640c40f332ee3ac60cfa73a87b48
- SHA1 8add5977576174d82196d4486c30e89c66875a98
- SHA512 567d67a6cd394492f607496b6d0c9cdaf4fe6bdc844e1f45af9fa62419f42cb61e785fc22f0611a3d8b9cf9602db438688aa21472e154baab2a7371b161b4363
- SSDEEP 12288:j3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mX:jx9GzHlTv/b35tecFB6+
- TLSH T1E7A4CF153680C472E36627750996E6F01AAABC3849A4D28FFB787F395D311934A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE