General
- Target 2026-11-03_38ecf644d4819899706ff412bb68f466_elex_rhadamanthys_stealc_stop
- Size 555KB
- Sample261104-3m8b3av1cv
- SHA256 6afeed6c4c1dc42dc1e1b97241419a7008ac3ee65e1af87cd62be0d8180dd40f
- MD5 38ecf644d4819899706ff412bb68f466
- SHA1 e5886fc27373b48e1b6a201f916a85d7cff0c151
- SHA512 7f896cc1140169bad62d41e2d04ac399137faf9fa6e879827160b47dec3bfdc9b57113c8b3bc869fc0c51344f9d50fe9f3982cf45a1b08cfcfd45957544d15f7
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzl4:+rt4/NArwjs5ol4
- TLSH T131C4BE113690C435F3662B750996E6F41AA97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-03_38ecf644d4819899706ff412bb68f466_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-03_38ecf644d4819899706ff412bb68f466_elex_rhadamanthys_stealc_stop
- Size 555KB
- SHA256 6afeed6c4c1dc42dc1e1b97241419a7008ac3ee65e1af87cd62be0d8180dd40f
- MD5 38ecf644d4819899706ff412bb68f466
- SHA1 e5886fc27373b48e1b6a201f916a85d7cff0c151
- SHA512 7f896cc1140169bad62d41e2d04ac399137faf9fa6e879827160b47dec3bfdc9b57113c8b3bc869fc0c51344f9d50fe9f3982cf45a1b08cfcfd45957544d15f7
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzl4:+rt4/NArwjs5ol4
- TLSH T131C4BE113690C435F3662B750996E6F41AA97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE