General
- Target 2026-11-07_fffa316589ac8e7bbe532547a6897cb7_elex_rhadamanthys_stealc_stop
- Size 536KB
- Sample261108-a9m1ests6j
- SHA256 fc09b135e6a34b83a96494e7c14e30ddb4c49ebd67d3d0ed89f285bed8fb4e32
- MD5 fffa316589ac8e7bbe532547a6897cb7
- SHA1 3cd7927c1552cdafa2ad902b1fdcc8b8cec729a4
- SHA512 9454e816df4ef1ae89fdb2afbf65e5396e6aeada266aca4c18ac33364ef1f1bf56b8b16f0d130ee67fb48d9ee65b3366214336ecce7455b9559b9db0ec9c8268
- SSDEEP 12288:q0nPhglq2Uyt4R/b2G/0hznQGoexBU/NPF:q0P/k4lb2wKatF
- TLSH T1FAC4CF1136808836E32617350956F7F41AA97C385AA5E68FF7A43E3A5D311938B3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-07_fffa316589ac8e7bbe532547a6897cb7_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-07_fffa316589ac8e7bbe532547a6897cb7_elex_rhadamanthys_stealc_stop
- Size 536KB
- SHA256 fc09b135e6a34b83a96494e7c14e30ddb4c49ebd67d3d0ed89f285bed8fb4e32
- MD5 fffa316589ac8e7bbe532547a6897cb7
- SHA1 3cd7927c1552cdafa2ad902b1fdcc8b8cec729a4
- SHA512 9454e816df4ef1ae89fdb2afbf65e5396e6aeada266aca4c18ac33364ef1f1bf56b8b16f0d130ee67fb48d9ee65b3366214336ecce7455b9559b9db0ec9c8268
- SSDEEP 12288:q0nPhglq2Uyt4R/b2G/0hznQGoexBU/NPF:q0P/k4lb2wKatF
- TLSH T1FAC4CF1136808836E32617350956F7F41AA97C385AA5E68FF7A43E3A5D311938B3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE