General
- Target 2026-11-09_23edd410757b975aa09f4db35f0e2337_elex_rhadamanthys_stop
- Size 175KB
- Sample261111-bdtnrsds2r
- SHA256 d849887690da1aa5531590bfd1a3c8e096fa8f31c8273673afd899d07cb2b80a
- MD5 23edd410757b975aa09f4db35f0e2337
- SHA1 82ae25dab15537ab6b5a0baa294aa0043068363e
- SHA512 7cd1d27f84b2d70f5310f60abb2d08d0e18348da334fe4bdf7e6c4023450901aaf272de861f638769798d4c6810b95cf7703f87b41f1820c32150196a722e2ec
- SSDEEP 1536:JF02aqzNYndSTa+B3Rt2fZt+RtTILSZpLIQaV3WvGtWX0gu5DqpwWLtxhl7p2Xu:wuYndSW7gILCLIPtqVu5Dqpxhz2e
- TLSH T1310407107640C436F36907315916EAF14969AD396AE8E98FF3B87E391D312C39A7324F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_23edd410757b975aa09f4db35f0e2337_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_23edd410757b975aa09f4db35f0e2337_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
-
218.54.28.139
Targets
-
- Target 2026-11-09_23edd410757b975aa09f4db35f0e2337_elex_rhadamanthys_stop
- Size 175KB
- SHA256 d849887690da1aa5531590bfd1a3c8e096fa8f31c8273673afd899d07cb2b80a
- MD5 23edd410757b975aa09f4db35f0e2337
- SHA1 82ae25dab15537ab6b5a0baa294aa0043068363e
- SHA512 7cd1d27f84b2d70f5310f60abb2d08d0e18348da334fe4bdf7e6c4023450901aaf272de861f638769798d4c6810b95cf7703f87b41f1820c32150196a722e2ec
- SSDEEP 1536:JF02aqzNYndSTa+B3Rt2fZt+RtTILSZpLIQaV3WvGtWX0gu5DqpwWLtxhl7p2Xu:wuYndSW7gILCLIPtqVu5Dqpxhz2e
- TLSH T1310407107640C436F36907315916EAF14969AD396AE8E98FF3B87E391D312C39A7324F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE