General
- Target 2026-11-09_983f5dba75b88aca76573408954a7761_elex_rhadamanthys_stealc_stop
- Size 555KB
- Sample261109-3jf4eawwh1
- SHA256 0d6434bf241bb5e4ccce5ad52be6446c5cc7a9136446c6803e5e47eac534a96b
- MD5 983f5dba75b88aca76573408954a7761
- SHA1 498291eabdb55e22a18d061a94045915391fd137
- SHA512 4482bbd78bdcf4ab340cab2419bb99609cb9573217e978e44d13f96efe2c9c9c9f79c2b736d40ac4c703be83858eff57142f74235ac503d842279af81e773544
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzlx:+rt4/NArwjs5olx
- TLSH T13BC4BE1136908475F3662B750996E6F41AB97C384AA4D28FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-09_983f5dba75b88aca76573408954a7761_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-09_983f5dba75b88aca76573408954a7761_elex_rhadamanthys_stealc_stop
- Size 555KB
- SHA256 0d6434bf241bb5e4ccce5ad52be6446c5cc7a9136446c6803e5e47eac534a96b
- MD5 983f5dba75b88aca76573408954a7761
- SHA1 498291eabdb55e22a18d061a94045915391fd137
- SHA512 4482bbd78bdcf4ab340cab2419bb99609cb9573217e978e44d13f96efe2c9c9c9f79c2b736d40ac4c703be83858eff57142f74235ac503d842279af81e773544
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzlx:+rt4/NArwjs5olx
- TLSH T13BC4BE1136908475F3662B750996E6F41AB97C384AA4D28FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE