General
- Target 2026-11-09_fe572f7a826fd0c009944201ddb1bba4_elex_rhadamanthys_stop
- Size 464KB
- Sample261109-rsreysyv2l
- SHA256 24edf66b1778f93ea844448e57df500371f19fa034ac6a15e2c76a1771e4ec0a
- MD5 fe572f7a826fd0c009944201ddb1bba4
- SHA1 3c69eddd53bc34857a3e521cbdde2e91f45e2561
- SHA512 63a0731065d0f4f162794a4591f9b829c1543af9c0dd883be9bcd53a249927e40938875b15a7d9a6cf9e0d40dc9bfb6146e51e0794e9ed663dd539119ca2ea1b
- SSDEEP 6144:P8Eoe/IebBVMweZGhHdJBV70FVKLbfW2x8VyMsmD6gzOmjpi+pMJQ8uUm9unpmn:vDdUGhHdJ370FVKmP0Ml+gzzjp+lsui
- TLSH T1EFA4C0153780C472E36627314996E2F11AAABC3959A4E68FF7A43F396D31183873724F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_fe572f7a826fd0c009944201ddb1bba4_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_fe572f7a826fd0c009944201ddb1bba4_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
218.54.30.235
-
121.88.5.181
-
112.223.217.101
Targets
-
- Target 2026-11-09_fe572f7a826fd0c009944201ddb1bba4_elex_rhadamanthys_stop
- Size 464KB
- SHA256 24edf66b1778f93ea844448e57df500371f19fa034ac6a15e2c76a1771e4ec0a
- MD5 fe572f7a826fd0c009944201ddb1bba4
- SHA1 3c69eddd53bc34857a3e521cbdde2e91f45e2561
- SHA512 63a0731065d0f4f162794a4591f9b829c1543af9c0dd883be9bcd53a249927e40938875b15a7d9a6cf9e0d40dc9bfb6146e51e0794e9ed663dd539119ca2ea1b
- SSDEEP 6144:P8Eoe/IebBVMweZGhHdJBV70FVKLbfW2x8VyMsmD6gzOmjpi+pMJQ8uUm9unpmn:vDdUGhHdJ370FVKmP0Ml+gzzjp+lsui
- TLSH T1EFA4C0153780C472E36627314996E2F11AAABC3959A4E68FF7A43F396D31183873724F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE