General
- Target 2026-11-05_3f5d77be5db1066bd31f841da4ca9b9d_elex_rhadamanthys_stealc_stop
- Size 536KB
- Sample261107-dst9ysg131
- SHA256 68ed3640b861d7a81e512816c82bedc7d69e68140a9e815959c882564ad90fdd
- MD5 3f5d77be5db1066bd31f841da4ca9b9d
- SHA1 108faddea6549b86d0c49bdb371a7ec2310c31bf
- SHA512 8a1e374765990315df64d5b2977770af498a0ab037c14d7adf8310cb28b77a074fc4117dcf5b8dba45c12a54766e24d1e8d156e7e96f7aae9ab46453119dcec8
- SSDEEP 12288:q0nPhglq2Uyt4R/b2G/0hznQGoexBU/NPH:q0P/k4lb2wKatH
- TLSH T172C4CF1136808836E32617350996F7F41AA97C385AA5E68FF7A43E3A5D311938B3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-05_3f5d77be5db1066bd31f841da4ca9b9d_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-05_3f5d77be5db1066bd31f841da4ca9b9d_elex_rhadamanthys_stealc_stop
- Size 536KB
- SHA256 68ed3640b861d7a81e512816c82bedc7d69e68140a9e815959c882564ad90fdd
- MD5 3f5d77be5db1066bd31f841da4ca9b9d
- SHA1 108faddea6549b86d0c49bdb371a7ec2310c31bf
- SHA512 8a1e374765990315df64d5b2977770af498a0ab037c14d7adf8310cb28b77a074fc4117dcf5b8dba45c12a54766e24d1e8d156e7e96f7aae9ab46453119dcec8
- SSDEEP 12288:q0nPhglq2Uyt4R/b2G/0hznQGoexBU/NPH:q0P/k4lb2wKatH
- TLSH T172C4CF1136808836E32617350996F7F41AA97C385AA5E68FF7A43E3A5D311938B3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE