General
- Target 2026-10-30_5b906ea7479327bcda8d668b9e06abaa_elex_rhadamanthys_stop
- Size 169KB
- Sample261101-cfrsmas13r
- SHA256 c8b0570e528299ac0088fd9cf014fab03573ba252f1d768e8421d4ed559a9434
- MD5 5b906ea7479327bcda8d668b9e06abaa
- SHA1 dc9ecd1f6a46779d0f71f27906c7ad4800232bf5
- SHA512 237d28bd90b060a1427df8cdd64a175d113afb71476961874cdba61c711699380f8a8ed886606fea2d32bb0794b9d7ec78deb984d8ebdcdfc3fc25eaaa1edcbd
- SSDEEP 1536:eADA0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEgvpxyTfUyJ:eADA0Wc7UJ6LZMaHLW65DE8pxWr
- TLSH T13F04D41166008471F3590B315906FAE049A9AD3D5AE8F98FF7787E3A6D322C39A7314F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-30_5b906ea7479327bcda8d668b9e06abaa_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-30_5b906ea7479327bcda8d668b9e06abaa_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.208
-
112.175.88.207
Targets
-
- Target 2026-10-30_5b906ea7479327bcda8d668b9e06abaa_elex_rhadamanthys_stop
- Size 169KB
- SHA256 c8b0570e528299ac0088fd9cf014fab03573ba252f1d768e8421d4ed559a9434
- MD5 5b906ea7479327bcda8d668b9e06abaa
- SHA1 dc9ecd1f6a46779d0f71f27906c7ad4800232bf5
- SHA512 237d28bd90b060a1427df8cdd64a175d113afb71476961874cdba61c711699380f8a8ed886606fea2d32bb0794b9d7ec78deb984d8ebdcdfc3fc25eaaa1edcbd
- SSDEEP 1536:eADA0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEgvpxyTfUyJ:eADA0Wc7UJ6LZMaHLW65DE8pxWr
- TLSH T13F04D41166008471F3590B315906FAE049A9AD3D5AE8F98FF7787E3A6D322C39A7314F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE