General
- Target 2026-10-30_bd0ce334346c95dc8f095dcc2f9aa346_elex_rhadamanthys_stealc_stop
- Size 555KB
- Sample261031-zceefsdz5w
- SHA256 15b779d4b14cfff03409742e82f9a49990be1c8dd5f47ddd19256dc4f8af844a
- MD5 bd0ce334346c95dc8f095dcc2f9aa346
- SHA1 18d6a847022018c01c46fe715941cd72837a1b2a
- SHA512 4388f69e22a617530f4a321ae1005063e7936045c11107d619d72e541db56e9b45ff573b8817323656136fb7f98afa2e80339932dfe1b33292caae2e2e4c8d03
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzlx:+rt4/NArwjs5olx
- TLSH T1D3C4BE113690C435F3662B750996E6F41AB97C384AA4D68FF7A83E395E301938A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-30_bd0ce334346c95dc8f095dcc2f9aa346_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-10-30_bd0ce334346c95dc8f095dcc2f9aa346_elex_rhadamanthys_stealc_stop
- Size 555KB
- SHA256 15b779d4b14cfff03409742e82f9a49990be1c8dd5f47ddd19256dc4f8af844a
- MD5 bd0ce334346c95dc8f095dcc2f9aa346
- SHA1 18d6a847022018c01c46fe715941cd72837a1b2a
- SHA512 4388f69e22a617530f4a321ae1005063e7936045c11107d619d72e541db56e9b45ff573b8817323656136fb7f98afa2e80339932dfe1b33292caae2e2e4c8d03
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzlx:+rt4/NArwjs5olx
- TLSH T1D3C4BE113690C435F3662B750996E6F41AB97C384AA4D68FF7A83E395E301938A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE