General
- Target 2026-10-31_7154f3681936038c1881bc830d63bed8_elex_rhadamanthys_stealc_stop
- Size 535KB
- Sample261102-ak4a4sy1dv
- SHA256 891d9b63d61ef603cd8e474abdada88f8225e1fb98131bc04128c4b4b417ba1f
- MD5 7154f3681936038c1881bc830d63bed8
- SHA1 0ffcc383a31350546682add2dd4a236b6eb93fe3
- SHA512 b623fee69f87ba4cbc52023c00df2d29aa62c79d353f4d303379a82152ff17f4b0db6c2acf40e2cd77ca984277dbd5372b04946642007fa5c02008ed321ecfab
- SSDEEP 12288:q0nPhglq2Uyt4R/b2G/0hznQGoexBU/NPJ:q0P/k4lb2wKatJ
- TLSH T154C4CF1136808876E32617350996F3F41AA97C385AA5E68FF7A43E3A5D311938B3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-31_7154f3681936038c1881bc830d63bed8_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-10-31_7154f3681936038c1881bc830d63bed8_elex_rhadamanthys_stealc_stop
- Size 535KB
- SHA256 891d9b63d61ef603cd8e474abdada88f8225e1fb98131bc04128c4b4b417ba1f
- MD5 7154f3681936038c1881bc830d63bed8
- SHA1 0ffcc383a31350546682add2dd4a236b6eb93fe3
- SHA512 b623fee69f87ba4cbc52023c00df2d29aa62c79d353f4d303379a82152ff17f4b0db6c2acf40e2cd77ca984277dbd5372b04946642007fa5c02008ed321ecfab
- SSDEEP 12288:q0nPhglq2Uyt4R/b2G/0hznQGoexBU/NPJ:q0P/k4lb2wKatJ
- TLSH T154C4CF1136808876E32617350996F3F41AA97C385AA5E68FF7A43E3A5D311938B3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE