General
- Target 2026-11-11_166086bdd69542207ca61f088c61304b_elex_rhadamanthys_stealc_stop
- Size 555KB
- Sample261113-veclesdx9x
- SHA256 81a1f4e409bd943f9dc03237640bfe0776d0729472e9bcad5aeb216cf0c3120f
- MD5 166086bdd69542207ca61f088c61304b
- SHA1 83bb3d2cac0049a5d6841c3ee2c41d2691b9627f
- SHA512 0a4f943828b642a252942413be18855747b6d09ff6d08a66e72b7cb94149cd82065ef71d4d74cbbdeb2c4ebed04a77de54236c7c56ba0c6e82ca5701b07f4837
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzll:+rt4/NArwjs5oll
- TLSH T1ACC4BE1136908475F3662B750996E6F41AB97C384AA4D28FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-11_166086bdd69542207ca61f088c61304b_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-11_166086bdd69542207ca61f088c61304b_elex_rhadamanthys_stealc_stop
- Size 555KB
- SHA256 81a1f4e409bd943f9dc03237640bfe0776d0729472e9bcad5aeb216cf0c3120f
- MD5 166086bdd69542207ca61f088c61304b
- SHA1 83bb3d2cac0049a5d6841c3ee2c41d2691b9627f
- SHA512 0a4f943828b642a252942413be18855747b6d09ff6d08a66e72b7cb94149cd82065ef71d4d74cbbdeb2c4ebed04a77de54236c7c56ba0c6e82ca5701b07f4837
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzll:+rt4/NArwjs5oll
- TLSH T1ACC4BE1136908475F3662B750996E6F41AB97C384AA4D28FF7A83E395E301D38A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE