Analysis

  • max time kernel
    103s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250502-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250502-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/07/2025, 18:51

General

  • Target

    2025-07-02_e5baf237110a4d67ad508c059bb6f1f4_elex_neshta_rhadamanthys_stop.exe

  • Size

    300KB

  • MD5

    e5baf237110a4d67ad508c059bb6f1f4

  • SHA1

    b58f06573d6305d45c221b7f2534e20cc00ed84c

  • SHA256

    3f704800f5c17fcaf05a3b5695877faf77e52d0ba8f2a7d6b06f164566379e2a

  • SHA512

    e0cfc3f48aabc133d8bb5194fc7ee40342cd359cbf1dba3ab7a475ba507ed58d34fa1a83d463cb745688242b724611fadb5e1b2c1c83e2e0738a6957b63c129b

  • SSDEEP

    6144:j99X/EI1iCBy5NM8L/nAHm8j8ctSRYnqB0V3r60G3yh:d1icy5NMm/nRZ3yh

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2025-07-02_e5baf237110a4d67ad508c059bb6f1f4_elex_neshta_rhadamanthys_stop.exe
    "C:\Users\Admin\AppData\Local\Temp\2025-07-02_e5baf237110a4d67ad508c059bb6f1f4_elex_neshta_rhadamanthys_stop.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3824
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 3824 -s 520
      2⤵
      • Program crash
      PID:5984
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 3824 -ip 3824
    1⤵
      PID:1988

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads