General
- Target 2026-11-05_a3083eed7755d06d59906d806a7c23ce_elex_rhadamanthys_stealc_stop
- Size 546KB
- Sample261106-rffspazwez
- SHA256 a8c4c499ba99693211a747a7f779ab65604ea57b5442ae3bf428ad2b700955cb
- MD5 a3083eed7755d06d59906d806a7c23ce
- SHA1 9622df6c54cc35c58d930886b5fb3eb6852eb6b9
- SHA512 6b07bb3133b6724c31f99403dbf0fb8b59cd1aa0f559b48b8f05eed1a858cc6b240bd7e51d2230f0f09a8162723021c66e22ccc85db6e767dd02a01bc2987460
- SSDEEP 6144:u2Kw7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzT1uj65CT1i6iSyYQM0JiS83G48e:u+GtVfjTQSaoINAHT1VQ1i3SyQEW85gB
- TLSH T1B0C4BE1136908475F3662B750996E2F41AB97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-05_a3083eed7755d06d59906d806a7c23ce_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-05_a3083eed7755d06d59906d806a7c23ce_elex_rhadamanthys_stealc_stop
- Size 546KB
- SHA256 a8c4c499ba99693211a747a7f779ab65604ea57b5442ae3bf428ad2b700955cb
- MD5 a3083eed7755d06d59906d806a7c23ce
- SHA1 9622df6c54cc35c58d930886b5fb3eb6852eb6b9
- SHA512 6b07bb3133b6724c31f99403dbf0fb8b59cd1aa0f559b48b8f05eed1a858cc6b240bd7e51d2230f0f09a8162723021c66e22ccc85db6e767dd02a01bc2987460
- SSDEEP 6144:u2Kw7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzT1uj65CT1i6iSyYQM0JiS83G48e:u+GtVfjTQSaoINAHT1VQ1i3SyQEW85gB
- TLSH T1B0C4BE1136908475F3662B750996E2F41AB97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE