General
- Target 2026-11-01_ec6d37f081d105ead0ad2f10549480e3_elex_rhadamanthys_stealc_stop
- Size 546KB
- Sample261102-etz29sg15j
- SHA256 cb43b75e0428edfb6dd7447f5209c2566d398e4f7e626d947b24403f421bb803
- MD5 ec6d37f081d105ead0ad2f10549480e3
- SHA1 d1cda9ce09bc16690323e9459d4dc6af94a6c116
- SHA512 84221e7989b2884e6a2e6bef5f2449d72f18b2bbf955558fc18ee27253f234b5f436b0f810ea602dd73c19f01d650b87b5f40823849ca5a5568d8775d9677002
- SSDEEP 6144:u2Kw7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzT1uj65CT1i6iSyYQM0JiS83G48J:u+GtVfjTQSaoINAHT1VQ1i3SyQEW85g6
- TLSH T1A8C4BE1136908476F36627750996E2F41AB97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_ec6d37f081d105ead0ad2f10549480e3_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-01_ec6d37f081d105ead0ad2f10549480e3_elex_rhadamanthys_stealc_stop
- Size 546KB
- SHA256 cb43b75e0428edfb6dd7447f5209c2566d398e4f7e626d947b24403f421bb803
- MD5 ec6d37f081d105ead0ad2f10549480e3
- SHA1 d1cda9ce09bc16690323e9459d4dc6af94a6c116
- SHA512 84221e7989b2884e6a2e6bef5f2449d72f18b2bbf955558fc18ee27253f234b5f436b0f810ea602dd73c19f01d650b87b5f40823849ca5a5568d8775d9677002
- SSDEEP 6144:u2Kw7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzT1uj65CT1i6iSyYQM0JiS83G48J:u+GtVfjTQSaoINAHT1VQ1i3SyQEW85g6
- TLSH T1A8C4BE1136908476F36627750996E2F41AB97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE