General
- Target 2026-11-03_6bbf11766b76669cddef7f05fecc716d_elex_rhadamanthys_stealc_stop
- Size 554KB
- Sample261104-wflq6aet7k
- SHA256 9c7cb5cc54a25cb2397533f1f37ce43c44961153eef7f5dbb7086279f6d55a58
- MD5 6bbf11766b76669cddef7f05fecc716d
- SHA1 9231d2a7efb0167c68674d82f8198215eb57ac55
- SHA512 05fcd2537d8b02897baf5d96d636e9846351fb124134641b1b4134c7ade8e9a84f912f394ba0a076840697ce53e04b84a1860c6fff56cea33fca7e0460666800
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzlg:+rt4/NArwjs5olg
- TLSH T1FBC4BE1136908435F3662B750996E6F41AB97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-03_6bbf11766b76669cddef7f05fecc716d_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-03_6bbf11766b76669cddef7f05fecc716d_elex_rhadamanthys_stealc_stop
- Size 554KB
- SHA256 9c7cb5cc54a25cb2397533f1f37ce43c44961153eef7f5dbb7086279f6d55a58
- MD5 6bbf11766b76669cddef7f05fecc716d
- SHA1 9231d2a7efb0167c68674d82f8198215eb57ac55
- SHA512 05fcd2537d8b02897baf5d96d636e9846351fb124134641b1b4134c7ade8e9a84f912f394ba0a076840697ce53e04b84a1860c6fff56cea33fca7e0460666800
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzlg:+rt4/NArwjs5olg
- TLSH T1FBC4BE1136908435F3662B750996E6F41AB97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE