General
- Target 2026-11-09_122a13591440f2c5ddbff86e4fa2512c_elex_rhadamanthys_stop
- Size 170KB
- Sample261111-dfe99sdh44
- SHA256 b0a6301859ce4367c5d8de163bd91df3a42709f7376f9bc08775b4e35a10b73d
- MD5 122a13591440f2c5ddbff86e4fa2512c
- SHA1 05de27997976e58c905fc688ee748df02d05e32c
- SHA512 458ca15f8fdb5c1052f00b041a8c25be3a4e5a25a77485ed97362268cd145cb7e0d51ff3ce980f547e2b64da8f228fc81785d643a06317bfb8316a5d94652681
- SSDEEP 1536:eADA0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEgvpxyTfzP:eADA0Wc7UJ6LZMaHLW65DE8pxW7P
- TLSH T18404D41166008471F3590B314916FAE049A9AD3D5AE8F98FF7787E3A6D322C39A7314F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_122a13591440f2c5ddbff86e4fa2512c_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_122a13591440f2c5ddbff86e4fa2512c_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.208
-
112.175.88.207
Targets
-
- Target 2026-11-09_122a13591440f2c5ddbff86e4fa2512c_elex_rhadamanthys_stop
- Size 170KB
- SHA256 b0a6301859ce4367c5d8de163bd91df3a42709f7376f9bc08775b4e35a10b73d
- MD5 122a13591440f2c5ddbff86e4fa2512c
- SHA1 05de27997976e58c905fc688ee748df02d05e32c
- SHA512 458ca15f8fdb5c1052f00b041a8c25be3a4e5a25a77485ed97362268cd145cb7e0d51ff3ce980f547e2b64da8f228fc81785d643a06317bfb8316a5d94652681
- SSDEEP 1536:eADA0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEgvpxyTfzP:eADA0Wc7UJ6LZMaHLW65DE8pxW7P
- TLSH T18404D41166008471F3590B314916FAE049A9AD3D5AE8F98FF7787E3A6D322C39A7314F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE