General
- Target 2026-11-01_f42dbe144bb7896b5490548e07b25dd1_elex_rhadamanthys_stealc_stop
- Size 523KB
- Sample261102-dnj87azwhz
- SHA256 da502ca026f7c9b4a811e1585a40d8a77dcc6484efffe2887c88016277edaf30
- MD5 f42dbe144bb7896b5490548e07b25dd1
- SHA1 d77ec7302821db3a9f93f0952a980d2e5546d417
- SHA512 4bb806b9db632f2fdf115127b9b9651d20ac813dbd21e7f5360db2909aa8ffdd7659ecef204930335e34850edaa225ed947b80b54fb4574bb0e296a3987d28ba
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigd:YwGtVfjTQSaoINAHTusMgDND4oqnDY
- TLSH T1BFB4BF103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_f42dbe144bb7896b5490548e07b25dd1_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-01_f42dbe144bb7896b5490548e07b25dd1_elex_rhadamanthys_stealc_stop
- Size 523KB
- SHA256 da502ca026f7c9b4a811e1585a40d8a77dcc6484efffe2887c88016277edaf30
- MD5 f42dbe144bb7896b5490548e07b25dd1
- SHA1 d77ec7302821db3a9f93f0952a980d2e5546d417
- SHA512 4bb806b9db632f2fdf115127b9b9651d20ac813dbd21e7f5360db2909aa8ffdd7659ecef204930335e34850edaa225ed947b80b54fb4574bb0e296a3987d28ba
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigd:YwGtVfjTQSaoINAHTusMgDND4oqnDY
- TLSH T1BFB4BF103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE