General
- Target 2026-11-09_2132692fb0156de445bc8cfc3d926184_elex_rhadamanthys_stop
- Size 468KB
- Sample261111-bpfw2sdc22
- SHA256 3b4795a616537a1d8ad9c58c9d43cde9d69d00c6fe596a59f7a6b863c46539ad
- MD5 2132692fb0156de445bc8cfc3d926184
- SHA1 6ef4b2b99a9addd3a10072f64601e0d1d9733e6b
- SHA512 72f9c1a2425d77559ededafb372c11ee3a4a08636766ba584a69adbdc23bcffad62c38e9918a0d5f9ac7aa18b100c5148270a42991cec6861be99658f79918e7
- SSDEEP 12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mr:9x9GzHlTv/b35tecFB6e
- TLSH T18AA4CF153680C472E36627750996F6F01AAABC3849A4D28FFAB87F395D311934A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_2132692fb0156de445bc8cfc3d926184_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_2132692fb0156de445bc8cfc3d926184_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
Targets
-
- Target 2026-11-09_2132692fb0156de445bc8cfc3d926184_elex_rhadamanthys_stop
- Size 468KB
- SHA256 3b4795a616537a1d8ad9c58c9d43cde9d69d00c6fe596a59f7a6b863c46539ad
- MD5 2132692fb0156de445bc8cfc3d926184
- SHA1 6ef4b2b99a9addd3a10072f64601e0d1d9733e6b
- SHA512 72f9c1a2425d77559ededafb372c11ee3a4a08636766ba584a69adbdc23bcffad62c38e9918a0d5f9ac7aa18b100c5148270a42991cec6861be99658f79918e7
- SSDEEP 12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mr:9x9GzHlTv/b35tecFB6e
- TLSH T18AA4CF153680C472E36627750996F6F01AAABC3849A4D28FFAB87F395D311934A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE