General
- Target 2026-11-01_80c6c6f9c82c8e1c30f065c6f5827f4a_elex_rhadamanthys_stealc_stop
- Size 525KB
- Sample261102-t1htwsff55
- SHA256 90d8c0050ba13a0a9984743bfd0b17333c78c29931eb1cd4328b481564433dee
- MD5 80c6c6f9c82c8e1c30f065c6f5827f4a
- SHA1 d9a24cf998a99c167b79854c471f520b9d9ebab1
- SHA512 9548187ad4afec9d343e63fb3b447cdaf972c10e2f45848c36a24ece5ab998a4c8f49c9e3c8b814c29224ddca4d4ec1a329504b256d974617a4988a49b5934ea
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigE:YwGtVfjTQSaoINAHTusMgDND4oqnDF
- TLSH T152B4BF103790C475E366273108A6E6F009B9BC385AA5D68FF7A47E3A5E311938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_80c6c6f9c82c8e1c30f065c6f5827f4a_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-01_80c6c6f9c82c8e1c30f065c6f5827f4a_elex_rhadamanthys_stealc_stop
- Size 525KB
- SHA256 90d8c0050ba13a0a9984743bfd0b17333c78c29931eb1cd4328b481564433dee
- MD5 80c6c6f9c82c8e1c30f065c6f5827f4a
- SHA1 d9a24cf998a99c167b79854c471f520b9d9ebab1
- SHA512 9548187ad4afec9d343e63fb3b447cdaf972c10e2f45848c36a24ece5ab998a4c8f49c9e3c8b814c29224ddca4d4ec1a329504b256d974617a4988a49b5934ea
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigE:YwGtVfjTQSaoINAHTusMgDND4oqnDF
- TLSH T152B4BF103790C475E366273108A6E6F009B9BC385AA5D68FF7A47E3A5E311938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE