General
- Target 2026-11-03_49b61a3d560e7ba63fbe0782eb3dc905_elex_rhadamanthys_stop
- Size 175KB
- Sample261104-1lay3azz4n
- SHA256 4666949d9d1d33441f2ea0ee12eba75d3776a67d44f9744a9f92340d786ccfb0
- MD5 49b61a3d560e7ba63fbe0782eb3dc905
- SHA1 c51f28461335be3a05e508d1270a19e879cc71b7
- SHA512 0ea49a13c7dd15f07434dbb55ed9f1144c6bca9480125345f803ee08a78495948e0dae77d8d194629380bd3822cea625032bc56be37dc2f6c136d67fc9c1e9f0
- SSDEEP 1536:JF02aqzNYndSTa+B3Rt2fZt+RtTILSZpLIQaV3WvGtWX0gu5DqpwWLtxhl7p2XW:wuYndSW7gILCLIPtqVu5Dqpxhz2G
- TLSH T14A0407107640C436F36907315916EAF14969AD396AE8E98FF3B87E391D312C39A7324F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-03_49b61a3d560e7ba63fbe0782eb3dc905_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_49b61a3d560e7ba63fbe0782eb3dc905_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
-
218.54.28.139
Targets
-
- Target 2026-11-03_49b61a3d560e7ba63fbe0782eb3dc905_elex_rhadamanthys_stop
- Size 175KB
- SHA256 4666949d9d1d33441f2ea0ee12eba75d3776a67d44f9744a9f92340d786ccfb0
- MD5 49b61a3d560e7ba63fbe0782eb3dc905
- SHA1 c51f28461335be3a05e508d1270a19e879cc71b7
- SHA512 0ea49a13c7dd15f07434dbb55ed9f1144c6bca9480125345f803ee08a78495948e0dae77d8d194629380bd3822cea625032bc56be37dc2f6c136d67fc9c1e9f0
- SSDEEP 1536:JF02aqzNYndSTa+B3Rt2fZt+RtTILSZpLIQaV3WvGtWX0gu5DqpwWLtxhl7p2XW:wuYndSW7gILCLIPtqVu5Dqpxhz2G
- TLSH T14A0407107640C436F36907315916EAF14969AD396AE8E98FF3B87E391D312C39A7324F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE