General
- Target 2026-11-09_919775170182fd65b2f2c48c77761328_elex_rhadamanthys_stop
- Size 241KB
- Sample261110-agbrpabd89
- SHA256 dbad3470e0a4e4d6510f754974e3f14bce2af4345007dd9c4ba68e5dcc170bc0
- MD5 919775170182fd65b2f2c48c77761328
- SHA1 111b16b42625056c5c96093405275822d3c143e1
- SHA512 013d677f4168628d98024f0627f2b4e4f90b5b6f10ae58b37905dac1dc99bcaaa4759d2bc80ff890c04cf98fbe9b9d1ece5000cbf533b1fee1b9d0dbf55bbe3e
- SSDEEP 3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2k:ZASpvo0LKkRzpxJ2kRqroik
- TLSH T1C234491176008475F3190B315A16FAE049A9AD3D1AE8F84FF7787E365D322839A7728F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_919775170182fd65b2f2c48c77761328_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_919775170182fd65b2f2c48c77761328_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.207
-
112.175.88.208
Targets
-
- Target 2026-11-09_919775170182fd65b2f2c48c77761328_elex_rhadamanthys_stop
- Size 241KB
- SHA256 dbad3470e0a4e4d6510f754974e3f14bce2af4345007dd9c4ba68e5dcc170bc0
- MD5 919775170182fd65b2f2c48c77761328
- SHA1 111b16b42625056c5c96093405275822d3c143e1
- SHA512 013d677f4168628d98024f0627f2b4e4f90b5b6f10ae58b37905dac1dc99bcaaa4759d2bc80ff890c04cf98fbe9b9d1ece5000cbf533b1fee1b9d0dbf55bbe3e
- SSDEEP 3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2k:ZASpvo0LKkRzpxJ2kRqroik
- TLSH T1C234491176008475F3190B315A16FAE049A9AD3D1AE8F84FF7787E365D322839A7728F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE