General
- Target 2026-11-10_d645d87188033e8a4aa330998a5ff14a_elex_rhadamanthys_stop
- Size 175KB
- Sample261111-xb5txabs5n
- SHA256 52ae5ad6d2b02ff759492335cc17ece0e1a5d4633c14010eacb4ca99357421b5
- MD5 d645d87188033e8a4aa330998a5ff14a
- SHA1 c9b744740078a0148c1b7dd77f3c10279c0ca484
- SHA512 5221f03fa42b0e2c0717f058494150c849f4866b8cc91da20cbc7c5458e47dd727b6b5f7e2a3362be96ef38dc1fc145771919fae2f74104a4ab1267b6e2ae11e
- SSDEEP 1536:JF02aqzNYndSTa+B3Rt2fZt+RtTILSZpLIQaV3WvGtWX0gu5DqpwWLtxhl7p2XY:wuYndSW7gILCLIPtqVu5Dqpxhz2o
- TLSH T1610407107640C476F36907314916EAF14969AD396AE8E98FF3B87E391D312C39A7324F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-10_d645d87188033e8a4aa330998a5ff14a_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-10_d645d87188033e8a4aa330998a5ff14a_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
-
218.54.28.139
Targets
-
- Target 2026-11-10_d645d87188033e8a4aa330998a5ff14a_elex_rhadamanthys_stop
- Size 175KB
- SHA256 52ae5ad6d2b02ff759492335cc17ece0e1a5d4633c14010eacb4ca99357421b5
- MD5 d645d87188033e8a4aa330998a5ff14a
- SHA1 c9b744740078a0148c1b7dd77f3c10279c0ca484
- SHA512 5221f03fa42b0e2c0717f058494150c849f4866b8cc91da20cbc7c5458e47dd727b6b5f7e2a3362be96ef38dc1fc145771919fae2f74104a4ab1267b6e2ae11e
- SSDEEP 1536:JF02aqzNYndSTa+B3Rt2fZt+RtTILSZpLIQaV3WvGtWX0gu5DqpwWLtxhl7p2XY:wuYndSW7gILCLIPtqVu5Dqpxhz2o
- TLSH T1610407107640C476F36907314916EAF14969AD396AE8E98FF3B87E391D312C39A7324F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE