General
- Target 2026-11-07_58615730cc2c146ba4f7c345b095b002_elex_rhadamanthys_stop
- Size 236KB
- Sample261108-sem12sds3s
- SHA256 c48f8ccd4a28071cbc7110fee286f30ad53cf938cd618944f0d7f8b2ba313e28
- MD5 58615730cc2c146ba4f7c345b095b002
- SHA1 d99e93aa9aa6d5d6b632314837fc142b475911df
- SHA512 6a29499a5657be2ee1a27754b324adb6f404f4d82c2c4114f51a7b5a091f5578209946082e575f4dd2666b67ff8601018bc0f2641b88e74b759d2e5cb56ffe64
- SSDEEP 3072:ARDHcD2npEcWILILEo/IGI7i65edpU+uQeX7IGCsXfi6ZEVjfZUg:Ad8gEcWiIL15FdpU+L+7y6fibX
- TLSH T1AF34381176008421F3590B315956FAE149A9AD3D19E8E08FF7B87E7A6D322C39A7324F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-07_58615730cc2c146ba4f7c345b095b002_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-07_58615730cc2c146ba4f7c345b095b002_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.207
-
112.175.88.208
Targets
-
- Target 2026-11-07_58615730cc2c146ba4f7c345b095b002_elex_rhadamanthys_stop
- Size 236KB
- SHA256 c48f8ccd4a28071cbc7110fee286f30ad53cf938cd618944f0d7f8b2ba313e28
- MD5 58615730cc2c146ba4f7c345b095b002
- SHA1 d99e93aa9aa6d5d6b632314837fc142b475911df
- SHA512 6a29499a5657be2ee1a27754b324adb6f404f4d82c2c4114f51a7b5a091f5578209946082e575f4dd2666b67ff8601018bc0f2641b88e74b759d2e5cb56ffe64
- SSDEEP 3072:ARDHcD2npEcWILILEo/IGI7i65edpU+uQeX7IGCsXfi6ZEVjfZUg:Ad8gEcWiIL15FdpU+L+7y6fibX
- TLSH T1AF34381176008421F3590B315956FAE149A9AD3D19E8E08FF7B87E7A6D322C39A7324F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE