General
- Target 2026-11-11_5ee43e0d514eeae4523b23023e4837fd_elex_rhadamanthys_stealc_stop
- Size 525KB
- Sample261113-nmay8sty8j
- SHA256 fbc6e4e8cad52d5fc79422d7042ccaa3a2bd85fea7d36e4251b16093c84e529a
- MD5 5ee43e0d514eeae4523b23023e4837fd
- SHA1 3d8f6c6ddd2ee163aeef1af06d4085d934d180f6
- SHA512 d23f275e55d5370f30148fee812e0e2766d8e8fb0129dc3b5d41c7d4be8031dc17b096111b1b4356e7c06f476cc409c71465e2573646d0022d22557db1fa61a0
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigv:YwGtVfjTQSaoINAHTusMgDND4oqnDS
- TLSH T176B4BF103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-11_5ee43e0d514eeae4523b23023e4837fd_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-11_5ee43e0d514eeae4523b23023e4837fd_elex_rhadamanthys_stealc_stop
- Size 525KB
- SHA256 fbc6e4e8cad52d5fc79422d7042ccaa3a2bd85fea7d36e4251b16093c84e529a
- MD5 5ee43e0d514eeae4523b23023e4837fd
- SHA1 3d8f6c6ddd2ee163aeef1af06d4085d934d180f6
- SHA512 d23f275e55d5370f30148fee812e0e2766d8e8fb0129dc3b5d41c7d4be8031dc17b096111b1b4356e7c06f476cc409c71465e2573646d0022d22557db1fa61a0
- SSDEEP 6144:Y2KW7lwFXUEeJi2xVCVxfwY+0QSyvmZ3INALzTuFjSMg4ONgOZLOMZDOP2jqAigv:YwGtVfjTQSaoINAHTusMgDND4oqnDS
- TLSH T176B4BF103790C475E36627310896E6F009B9BC385AA5D68FF7A47E3A5E312938A7734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE