General
- Target 2026-11-07_799c2c3e652ede6c7d38d0f62e59fe24_elex_rhadamanthys_stealc_stop
- Size 547KB
- Sample261108-px7lmacz8k
- SHA256 b898679d67a0c6bd594558d66d851a1abc381df2c5279113f14329d16c486080
- MD5 799c2c3e652ede6c7d38d0f62e59fe24
- SHA1 8c15f5b8afa90884e8b9e2aaa31e816ac533ebd7
- SHA512 4661436801a60a882253eba32929902a41a5364554abc2f1fdf35beeebacf4b10f71bbc36ae0d8b3fb40cd72e6d87174191815b0aba617630a8424bb8d5f5b99
- SSDEEP 6144:u2Kw7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzT1uj65CT1i6iSyYQM0JiS83G483:u+GtVfjTQSaoINAHT1VQ1i3SyQEW85gw
- TLSH T131C4BE1136908475F3662B750996E2F41AB97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-07_799c2c3e652ede6c7d38d0f62e59fe24_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-07_799c2c3e652ede6c7d38d0f62e59fe24_elex_rhadamanthys_stealc_stop
- Size 547KB
- SHA256 b898679d67a0c6bd594558d66d851a1abc381df2c5279113f14329d16c486080
- MD5 799c2c3e652ede6c7d38d0f62e59fe24
- SHA1 8c15f5b8afa90884e8b9e2aaa31e816ac533ebd7
- SHA512 4661436801a60a882253eba32929902a41a5364554abc2f1fdf35beeebacf4b10f71bbc36ae0d8b3fb40cd72e6d87174191815b0aba617630a8424bb8d5f5b99
- SSDEEP 6144:u2Kw7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzT1uj65CT1i6iSyYQM0JiS83G483:u+GtVfjTQSaoINAHT1VQ1i3SyQEW85gw
- TLSH T131C4BE1136908475F3662B750996E2F41AB97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE