General
- Target 2026-11-10_c9b7b7470d444c46fdbf04814bc33058_elex_rhadamanthys_stealc_stop
- Size 554KB
- Sample261111-y1hlcays2n
- SHA256 169bac3fef0af74535120a2c606b852208db6ae9d8df149edd0ac853efc7f15f
- MD5 c9b7b7470d444c46fdbf04814bc33058
- SHA1 59fdbab2f3eeffec87425359095d2623e31a9b5e
- SHA512 70bd473724963affd1333ece46ebd5e8bbd63b1c963d9033a01f14a71878c7d6b1612b67bcff61a33a2db9775b165e398ebf8693f50222ec7585ec1c5470b7f6
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzlr:+rt4/NArwjs5olr
- TLSH T140C4BE1136908475F3662B750996E6F40AB97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-10_c9b7b7470d444c46fdbf04814bc33058_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-10_c9b7b7470d444c46fdbf04814bc33058_elex_rhadamanthys_stealc_stop
- Size 554KB
- SHA256 169bac3fef0af74535120a2c606b852208db6ae9d8df149edd0ac853efc7f15f
- MD5 c9b7b7470d444c46fdbf04814bc33058
- SHA1 59fdbab2f3eeffec87425359095d2623e31a9b5e
- SHA512 70bd473724963affd1333ece46ebd5e8bbd63b1c963d9033a01f14a71878c7d6b1612b67bcff61a33a2db9775b165e398ebf8693f50222ec7585ec1c5470b7f6
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzlr:+rt4/NArwjs5olr
- TLSH T140C4BE1136908475F3662B750996E6F40AB97C384AA4D68FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE