General
- Target 2026-11-09_23c77ca9b7ad0d31f4e95cd0ba019340_elex_rhadamanthys_stop
- Size 175KB
- Sample261111-bd9d8axvhy
- SHA256 5bd3728faf21d78a898a49527168372139d99e64ba2249c6ff2c2638a6a87b87
- MD5 23c77ca9b7ad0d31f4e95cd0ba019340
- SHA1 8fc86af7576fbc0463f0b78f4b69837ec27a45dd
- SHA512 d1a12799e9cce30b93415f925077c2513e23712c58fc22e62ac310c5313525f62e240bac4888468480f8db47ebb7ba7506f74a4cd4dc7a24fa38bdf566f7974d
- SSDEEP 1536:JF02aqzNYndSTa+B3Rt2fZt+RtTILSZpLIQaV3WvGtWX0gu5DqpwWLtxhl7p2Xi:wuYndSW7gILCLIPtqVu5Dqpxhz2y
- TLSH T1770407107640C436F36907315916EAF14969AD396AE8E98FF3B87E391D312C39A7324F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_23c77ca9b7ad0d31f4e95cd0ba019340_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_23c77ca9b7ad0d31f4e95cd0ba019340_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
-
218.54.28.139
Targets
-
- Target 2026-11-09_23c77ca9b7ad0d31f4e95cd0ba019340_elex_rhadamanthys_stop
- Size 175KB
- SHA256 5bd3728faf21d78a898a49527168372139d99e64ba2249c6ff2c2638a6a87b87
- MD5 23c77ca9b7ad0d31f4e95cd0ba019340
- SHA1 8fc86af7576fbc0463f0b78f4b69837ec27a45dd
- SHA512 d1a12799e9cce30b93415f925077c2513e23712c58fc22e62ac310c5313525f62e240bac4888468480f8db47ebb7ba7506f74a4cd4dc7a24fa38bdf566f7974d
- SSDEEP 1536:JF02aqzNYndSTa+B3Rt2fZt+RtTILSZpLIQaV3WvGtWX0gu5DqpwWLtxhl7p2Xi:wuYndSW7gILCLIPtqVu5Dqpxhz2y
- TLSH T1770407107640C436F36907315916EAF14969AD396AE8E98FF3B87E391D312C39A7324F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE