General
- Target 2026-11-09_2de8b1e202a9e19eed8ef0e6ab49e054_elex_rhadamanthys_stop
- Size 468KB
- Sample261110-3ppbzace47
- SHA256 8915192dd386ccb057bd9feff5b5eafd46ec716e6bc3cd33aacafff5e965779a
- MD5 2de8b1e202a9e19eed8ef0e6ab49e054
- SHA1 b5231517bc8b589e63a0079ebe44f7edbd008c03
- SHA512 7868649e9422365fa696a960e71406010eac2e84d2c8b671acb8513ca687ccc9a53587ede1eb6ecccdcfac2c3d653033be14b692a8279b9f0b6f20b7a27ef3df
- SSDEEP 12288:j3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6md:jx9GzHlTv/b35tecFB68
- TLSH T113A4CF153A80C472E36627750996E6F01AAABC3849A4D28FFB787F395D311934A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_2de8b1e202a9e19eed8ef0e6ab49e054_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_2de8b1e202a9e19eed8ef0e6ab49e054_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-11-09_2de8b1e202a9e19eed8ef0e6ab49e054_elex_rhadamanthys_stop
- Size 468KB
- SHA256 8915192dd386ccb057bd9feff5b5eafd46ec716e6bc3cd33aacafff5e965779a
- MD5 2de8b1e202a9e19eed8ef0e6ab49e054
- SHA1 b5231517bc8b589e63a0079ebe44f7edbd008c03
- SHA512 7868649e9422365fa696a960e71406010eac2e84d2c8b671acb8513ca687ccc9a53587ede1eb6ecccdcfac2c3d653033be14b692a8279b9f0b6f20b7a27ef3df
- SSDEEP 12288:j3CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6md:jx9GzHlTv/b35tecFB68
- TLSH T113A4CF153A80C472E36627750996E6F01AAABC3849A4D28FFB787F395D311934A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE