2025-09-23_80ab8bffa0ba98a7dddac3e17ec6cb07_elex_karagany_rhadamanthys_stop

General

Target
2025-09-23_80ab8bffa0ba98a7dddac3e17ec6cb07_elex_karagany_rhadamanthys_stop
Size 198KB
Sample250923-ewffmsfk7y
SHA256 b9e2bcc75bc7b46d890e494b9669a18519ef34ff9297d6d8065f7594125c5e7b
MD5 80ab8bffa0ba98a7dddac3e17ec6cb07
SHA1 54e49d78f6f5bc2b27a0501b56b2eb002b3f3d2e
SHA512 21e7d7877aa45deee3aaba392c9fa5585685f6ed540f43bec13ec7d9d5f06b3224d24e45981c96b9e4de33a4aa2a2b534eb2a0a0814f89d2a4029e34ee971324
SSDEEP 3072:OY3Rr2FCJ3u1wf8yehDfL+5sVErh+BUgzQguHN8E8rREtK:qCJ3upyADfLehrgxfE8rCtK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-09-23_80ab8bffa0ba98a7dddac3e17ec6cb07_elex_karagany_rhadamanthys_stop

File Explorer

2025-09-23_80ab8bffa0ba98a7dddac3e17ec6cb07_elex_karagany_rhadamanthys_stop

.exe 198KB

2025-09-23_80ab8bffa0ba98a7dddac3e17ec6cb07_elex_karagany_rhadamanthys_stop

IMPHASH 542f2e5d88c0f1f34844352baf76c359
SHA256 b9e2bcc75bc7b46d890e494b9669a18519ef34ff9297d6d8065f7594125c5e7b
MD5 80ab8bffa0ba98a7dddac3e17ec6cb07
SHA1 54e49d78f6f5bc2b27a0501b56b2eb002b3f3d2e
SHA512 21e7d7877aa45deee3aaba392c9fa5585685f6ed540f43bec13ec7d9d5f06b3224d24e45981c96b9e4de33a4aa2a2b534eb2a0a0814f89d2a4029e34ee971324
SSDEEP 3072:OY3Rr2FCJ3u1wf8yehDfL+5sVErh+BUgzQguHN8E8rREtK:qCJ3upyADfLehrgxfE8rCtK
MD5 SHA1 SHA512 SSDEEP

windows:62583 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

19570

Major OS version

62583

Entry point

11469

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount GlobalAlloc TerminateProcess lstrcatA GetHandleInformation GetLastError SetLastError GetProcAddress LoadLibraryA GetCurrentProcess DuplicateHandle SetProcessShutdownParameters CloseHandle ReadFile CreateFileW GetStringTypeW OutputDebugStringW FlushFileBuffers GetCPInfo lstrlenA GetNativeSystemInfo SetProcessAffinityMask SetProcessWorkingSetSize ExitProcess WriteConsoleW SetStdHandle HeapFree EncodePointer DecodePointer GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent IsProcessorFeaturePresent GetProcessHeap HeapAlloc GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize EnterCriticalSection LeaveCriticalSection WriteFile GetConsoleCP GetConsoleMode GetCurrentThreadId GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW IsValidCodePage GetACP GetOEMCP HeapReAlloc LCMapStringW SetFilePointerEx ReadConsoleW

user32

GetDCEx ShowScrollBar LoadImageA PeekMessageW

advapi32

InitiateSystemShutdownW GetUserNameA LookupPrivilegeNameA SetSecurityDescriptorControl CloseEventLog

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

2025-09-23_80ab8bffa0ba98a7dddac3e17ec6cb07_elex_karagany_rhadamanthys_stop

kernel32

user32

advapi32

msimg32

generic