General
- Target 2026-11-09_81b51bbcd6742492007812d5514eda6a_elex_rhadamanthys_stop
- Size 464KB
- Sample261110-rqxtysvsft
- SHA256 86ae4397df47ea29c91d3c526ef86f20522c4bfd8b13e7e25c1775c027738ed8
- MD5 81b51bbcd6742492007812d5514eda6a
- SHA1 fc56b8e7887609d79aa90ecb0815d115c719c623
- SHA512 648391a91f360d74d41326e5d79df1b32b5596049623a2e1d9864f6475ad79c607f81c1a3d11c4f15c90a472c9936135a94fa649d56b72f1b14df12b173ffb16
- SSDEEP 6144:P8Eoe/IebBVMweZGhHdJBV70FVKLbfW2x8VyMsmD6gzOmjpi+pMJQ8uUm9unpmZ:vDdUGhHdJ370FVKmP0Ml+gzzjp+lsuk
- TLSH T18FA4C0153680C472E36627314996E2F11AAABC3959A4E68FF7A43E396D31183873724F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_81b51bbcd6742492007812d5514eda6a_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_81b51bbcd6742492007812d5514eda6a_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
218.54.30.235
-
121.88.5.181
-
112.223.217.101
Targets
-
- Target 2026-11-09_81b51bbcd6742492007812d5514eda6a_elex_rhadamanthys_stop
- Size 464KB
- SHA256 86ae4397df47ea29c91d3c526ef86f20522c4bfd8b13e7e25c1775c027738ed8
- MD5 81b51bbcd6742492007812d5514eda6a
- SHA1 fc56b8e7887609d79aa90ecb0815d115c719c623
- SHA512 648391a91f360d74d41326e5d79df1b32b5596049623a2e1d9864f6475ad79c607f81c1a3d11c4f15c90a472c9936135a94fa649d56b72f1b14df12b173ffb16
- SSDEEP 6144:P8Eoe/IebBVMweZGhHdJBV70FVKLbfW2x8VyMsmD6gzOmjpi+pMJQ8uUm9unpmZ:vDdUGhHdJ370FVKmP0Ml+gzzjp+lsuk
- TLSH T18FA4C0153680C472E36627314996E2F11AAABC3959A4E68FF7A43E396D31183873724F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE