General
- Target 2026-11-09_417f3e6f0b53f0397772d8f621c2c630_elex_rhadamanthys_stop
- Size 242KB
- Sample261110-1g5ymsbd83
- SHA256 62ccdc1d99aa1f8cbb4096ad372a988a345bbf5a93661115fdb58161aff73bee
- MD5 417f3e6f0b53f0397772d8f621c2c630
- SHA1 27039f486f5dd741804462723f3b72246691db0f
- SHA512 77b2f727623c988d94ceaf21df37caa3e0178b9c1544e3249c9edf1a86b060d826650313b6208d9a5f32231f4f60cd389d1a22250d6ebcb6f233845ba2433a07
- SSDEEP 3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2f:ZASpvo0LKkRzpxJ2kRqroif
- TLSH T1D534491166008475F3190B315A16FAE049A9AD3D1AE8F84FF7787E365D322839A7728F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_417f3e6f0b53f0397772d8f621c2c630_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_417f3e6f0b53f0397772d8f621c2c630_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.207
-
112.175.88.208
Targets
-
- Target 2026-11-09_417f3e6f0b53f0397772d8f621c2c630_elex_rhadamanthys_stop
- Size 242KB
- SHA256 62ccdc1d99aa1f8cbb4096ad372a988a345bbf5a93661115fdb58161aff73bee
- MD5 417f3e6f0b53f0397772d8f621c2c630
- SHA1 27039f486f5dd741804462723f3b72246691db0f
- SHA512 77b2f727623c988d94ceaf21df37caa3e0178b9c1544e3249c9edf1a86b060d826650313b6208d9a5f32231f4f60cd389d1a22250d6ebcb6f233845ba2433a07
- SSDEEP 3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2f:ZASpvo0LKkRzpxJ2kRqroif
- TLSH T1D534491166008475F3190B315A16FAE049A9AD3D1AE8F84FF7787E365D322839A7728F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE