General
- Target 2026-11-04_f09d639e26c304a83087fae1b008ae59_elex_rhadamanthys_stealc_stop
- Size 555KB
- Sample261105-gj4c2sas2n
- SHA256 9d844afe1d3be6c4ddb3ca276819f1fc1c39566e39325c077a7e6b3153430551
- MD5 f09d639e26c304a83087fae1b008ae59
- SHA1 261cc2b24533c1f6c12f15ffd5d1da47d1e61ac7
- SHA512 ba1807384e3d0c52d5c745a9a286762e1b3619256d477f8ad4feab029d0a3bd0348c7d27164ed75dda13c794f8f2db7c4c360cc1c8053ef7530548655632f43b
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzlc:+rt4/NArwjs5olc
- TLSH T15EC4BE1136908475F3662B750996E6F40AB97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-04_f09d639e26c304a83087fae1b008ae59_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-04_f09d639e26c304a83087fae1b008ae59_elex_rhadamanthys_stealc_stop
- Size 555KB
- SHA256 9d844afe1d3be6c4ddb3ca276819f1fc1c39566e39325c077a7e6b3153430551
- MD5 f09d639e26c304a83087fae1b008ae59
- SHA1 261cc2b24533c1f6c12f15ffd5d1da47d1e61ac7
- SHA512 ba1807384e3d0c52d5c745a9a286762e1b3619256d477f8ad4feab029d0a3bd0348c7d27164ed75dda13c794f8f2db7c4c360cc1c8053ef7530548655632f43b
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzlc:+rt4/NArwjs5olc
- TLSH T15EC4BE1136908475F3662B750996E6F40AB97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE