General
- Target 2026-10-31_e367e729395d3a208819e12c12e20cb9_elex_rhadamanthys_stealc_stop
- Size 555KB
- Sample261101-xtgj2adb25
- SHA256 78e10c0d545cde22eee7a1f479bd1721bbb4e7b82527762592a795cc773e5794
- MD5 e367e729395d3a208819e12c12e20cb9
- SHA1 ead697fc503f9deae4453b38f426d2b7940fa58b
- SHA512 4a5067ccfb3c035517bfd2fe8eaf4caaf8f68261cfba33b6ac00e861e363c5466c43c21d36822a9957d6299e9181544e25031579cdf47f2298f8aa5731e5d1c9
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzlf:+rt4/NArwjs5olf
- TLSH T13CC4BE1136908435F3662B750996E6F41AB97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-31_e367e729395d3a208819e12c12e20cb9_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-10-31_e367e729395d3a208819e12c12e20cb9_elex_rhadamanthys_stealc_stop
- Size 555KB
- SHA256 78e10c0d545cde22eee7a1f479bd1721bbb4e7b82527762592a795cc773e5794
- MD5 e367e729395d3a208819e12c12e20cb9
- SHA1 ead697fc503f9deae4453b38f426d2b7940fa58b
- SHA512 4a5067ccfb3c035517bfd2fe8eaf4caaf8f68261cfba33b6ac00e861e363c5466c43c21d36822a9957d6299e9181544e25031579cdf47f2298f8aa5731e5d1c9
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzlf:+rt4/NArwjs5olf
- TLSH T13CC4BE1136908435F3662B750996E6F41AB97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE