General
- Target 2026-11-04_fbc3d3cc37d9d002b8df66d469a9fab0_elex_rhadamanthys_stealc_stop
- Size 546KB
- Sample261105-eepmzshx8j
- SHA256 d604a0fa6e418f6af90ff0c471252704b015c673c447efaf3eaa171a3fbc5e3e
- MD5 fbc3d3cc37d9d002b8df66d469a9fab0
- SHA1 6cc4deabd1c9997f0d74d1fd4f16381f2407bf69
- SHA512 03da7782fb13a6a3462268363467e900aa63d028ac5a3633b79b0d95507df39ddcbdbf4299305cdc8e0cd44aa53c6c99dd483db777ce644ae351f3bfd899a94b
- SSDEEP 6144:u2Kw7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzT1uj65CT1i6iSyYQM0JiS83G48D:u+GtVfjTQSaoINAHT1VQ1i3SyQEW85gg
- TLSH T195C4BE1136908476F36627750996E2F41AB97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-04_fbc3d3cc37d9d002b8df66d469a9fab0_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-04_fbc3d3cc37d9d002b8df66d469a9fab0_elex_rhadamanthys_stealc_stop
- Size 546KB
- SHA256 d604a0fa6e418f6af90ff0c471252704b015c673c447efaf3eaa171a3fbc5e3e
- MD5 fbc3d3cc37d9d002b8df66d469a9fab0
- SHA1 6cc4deabd1c9997f0d74d1fd4f16381f2407bf69
- SHA512 03da7782fb13a6a3462268363467e900aa63d028ac5a3633b79b0d95507df39ddcbdbf4299305cdc8e0cd44aa53c6c99dd483db777ce644ae351f3bfd899a94b
- SSDEEP 6144:u2Kw7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzT1uj65CT1i6iSyYQM0JiS83G48D:u+GtVfjTQSaoINAHT1VQ1i3SyQEW85gg
- TLSH T195C4BE1136908476F36627750996E2F41AB97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE