General
- Target 2026-11-09_75f0df3b1a32e9fb97b7c9fb2b2c4943_elex_rhadamanthys_stop
- Size 464KB
- Sample261110-s8vb8age45
- SHA256 ea9c519635d7cc4c0421cc619e4759948d240df90e3bb7902cbcf6bc277ff135
- MD5 75f0df3b1a32e9fb97b7c9fb2b2c4943
- SHA1 a77882af2963574bc4b6f38fef5adf45aa79329b
- SHA512 9cb97b14bb53bf94b79c6446b932c9b25b79507317dd5fd26098530c6d6bb67d26c84acec2e277ef898575e8a98baec028e8ba37aac3d1fc3e3e7e1202f42df5
- SSDEEP 6144:P8Eoe/IebBVMweZGhHdJBV70FVKLbfW2x8VyMsmD6gzOmjpi+pMJQ8uUm9unpm+:vDdUGhHdJ370FVKmP0Ml+gzzjp+lsu/
- TLSH T1B3A4C0153680C472E36627314996E2F11AAABC3959A4E68FF7A43E396D311C3873724F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_75f0df3b1a32e9fb97b7c9fb2b2c4943_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_75f0df3b1a32e9fb97b7c9fb2b2c4943_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
218.54.30.235
-
121.88.5.181
-
112.223.217.101
Targets
-
- Target 2026-11-09_75f0df3b1a32e9fb97b7c9fb2b2c4943_elex_rhadamanthys_stop
- Size 464KB
- SHA256 ea9c519635d7cc4c0421cc619e4759948d240df90e3bb7902cbcf6bc277ff135
- MD5 75f0df3b1a32e9fb97b7c9fb2b2c4943
- SHA1 a77882af2963574bc4b6f38fef5adf45aa79329b
- SHA512 9cb97b14bb53bf94b79c6446b932c9b25b79507317dd5fd26098530c6d6bb67d26c84acec2e277ef898575e8a98baec028e8ba37aac3d1fc3e3e7e1202f42df5
- SSDEEP 6144:P8Eoe/IebBVMweZGhHdJBV70FVKLbfW2x8VyMsmD6gzOmjpi+pMJQ8uUm9unpm+:vDdUGhHdJ370FVKmP0Ml+gzzjp+lsu/
- TLSH T1B3A4C0153680C472E36627314996E2F11AAABC3959A4E68FF7A43E396D311C3873724F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE