General
- Target 2026-11-03_95ba382726497c0d26e9db7337eaa176_elex_rhadamanthys_stop
- Size 468KB
- Sample261104-qnslsadf23
- SHA256 78a30226bcc2db2cf81931a890684fb765fb70805b48d576523b2194b002b7b9
- MD5 95ba382726497c0d26e9db7337eaa176
- SHA1 3a09acf82b566f452591ef4d36ea09c3683e97e7
- SHA512 163295cfad193250efd0afeffc2a37562946453591b6617f8b9794475cffac9719f6bf2b544dc7ee4c029db4f2b16cb072d111ed8fd8b4b19194d2a6854b396e
- SSDEEP 12288:j3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mv:jx9GzHlTv/b35tecFB62
- TLSH T1AAA4CF113A80C472E36627750996E6F01AAABC3859A4D28FFB787F395D311934A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-03_95ba382726497c0d26e9db7337eaa176_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_95ba382726497c0d26e9db7337eaa176_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-11-03_95ba382726497c0d26e9db7337eaa176_elex_rhadamanthys_stop
- Size 468KB
- SHA256 78a30226bcc2db2cf81931a890684fb765fb70805b48d576523b2194b002b7b9
- MD5 95ba382726497c0d26e9db7337eaa176
- SHA1 3a09acf82b566f452591ef4d36ea09c3683e97e7
- SHA512 163295cfad193250efd0afeffc2a37562946453591b6617f8b9794475cffac9719f6bf2b544dc7ee4c029db4f2b16cb072d111ed8fd8b4b19194d2a6854b396e
- SSDEEP 12288:j3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mv:jx9GzHlTv/b35tecFB62
- TLSH T1AAA4CF113A80C472E36627750996E6F01AAABC3859A4D28FFB787F395D311934A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE