General
- Target 2026-11-09_41ddc534a19dc096d583780441dbe8a1_elex_rhadamanthys_sakula_stealc_stop_tofsee
- Size 1.4MB
- Sample261110-1fep3abd53
- SHA256 e3c5f8aea9a773f1a3a8e31e0df24a136d011aaedfdfd96b960062f3b1a38fa1
- MD5 41ddc534a19dc096d583780441dbe8a1
- SHA1 5bc73d9e77d466d7c994ce22b9622cf2eee31e2a
- SHA512 74f3f4ff1a180a500d482506f6512192cb5eefbfcc53e88182a777ebf1afb19e964eba9e39b099ca9d852258a854295ce420f217081c77f4a481d2f76bffb5c7
- SSDEEP 12288:WwCXnLquXU99ICNj7xrcqPkePh+RvMaBlYJQCe2m9Or:FFn9pNjFMePh+RpBlU69Or
- TLSH T12665DF257A409071E7A90B714812E6B50D696C3D06A8E5CFF7783E3A6D312DF867328F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-11-09_41ddc534a19dc096d583780441dbe8a1_elex_rhadamanthys_sakula_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_41ddc534a19dc096d583780441dbe8a1_elex_rhadamanthys_sakula_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_41ddc534a19dc096d583780441dbe8a1_elex_rhadamanthys_sakula_stealc_stop_tofsee
- Size 1.4MB
- SHA256 e3c5f8aea9a773f1a3a8e31e0df24a136d011aaedfdfd96b960062f3b1a38fa1
- MD5 41ddc534a19dc096d583780441dbe8a1
- SHA1 5bc73d9e77d466d7c994ce22b9622cf2eee31e2a
- SHA512 74f3f4ff1a180a500d482506f6512192cb5eefbfcc53e88182a777ebf1afb19e964eba9e39b099ca9d852258a854295ce420f217081c77f4a481d2f76bffb5c7
- SSDEEP 12288:WwCXnLquXU99ICNj7xrcqPkePh+RvMaBlYJQCe2m9Or:FFn9pNjFMePh+RpBlU69Or
- TLSH T12665DF257A409071E7A90B714812E6B50D696C3D06A8E5CFF7783E3A6D312DF867328F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables built or packed with MPress PE compressor
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE