General
- Target 2026-11-09_1c342c4430db1ac0a815be37324067a7_elex_rhadamanthys_stop
- Size 464KB
- Sample261111-ccq2xsds8p
- SHA256 c1b8d5365645a781f60ffb05f07b7ce2e1eff719b3c72ec0e7efb20c13fe4766
- MD5 1c342c4430db1ac0a815be37324067a7
- SHA1 405014338d61ba90bab9c24678a6fe76cee098ad
- SHA512 7df62b7c59e9ea429d05bbbe0b9ad8cfb7f4ad1d8ff8ef66e179d9ac6dded17cb683f7887e9f1cffd3b0d58c23d5e7edca1725fbb7481b74e9e6202378b4fb11
- SSDEEP 6144:P8Eoe/IebBVMweZGhHdJBV70FVKLbfW2x8VyMsmD6gzOmjpi+pMJQ8uUm9unpmE:vDdUGhHdJ370FVKmP0Ml+gzzjp+lsuN
- TLSH T12AA4C0153680C472E36627314996E2F11AAABC3959A4E68FF7A43F396D311C3873724F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_1c342c4430db1ac0a815be37324067a7_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_1c342c4430db1ac0a815be37324067a7_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
218.54.30.235
-
121.88.5.181
-
112.223.217.101
Targets
-
- Target 2026-11-09_1c342c4430db1ac0a815be37324067a7_elex_rhadamanthys_stop
- Size 464KB
- SHA256 c1b8d5365645a781f60ffb05f07b7ce2e1eff719b3c72ec0e7efb20c13fe4766
- MD5 1c342c4430db1ac0a815be37324067a7
- SHA1 405014338d61ba90bab9c24678a6fe76cee098ad
- SHA512 7df62b7c59e9ea429d05bbbe0b9ad8cfb7f4ad1d8ff8ef66e179d9ac6dded17cb683f7887e9f1cffd3b0d58c23d5e7edca1725fbb7481b74e9e6202378b4fb11
- SSDEEP 6144:P8Eoe/IebBVMweZGhHdJBV70FVKLbfW2x8VyMsmD6gzOmjpi+pMJQ8uUm9unpmE:vDdUGhHdJ370FVKmP0Ml+gzzjp+lsuN
- TLSH T12AA4C0153680C472E36627314996E2F11AAABC3959A4E68FF7A43F396D311C3873724F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE