General
- Target 2026-04-09_e77a030bf4d5a70b353f0245e23f8d9e_elex_hijackloader_rhadamanthys_stealc_stop_tofsee
- Size 157KB
- Sample260409-mx84caev7l
- SHA256 02c6beb604ae13b16205336f783540009051bb2bb2447cb6d8639dd742c6865f
- MD5 e77a030bf4d5a70b353f0245e23f8d9e
- SHA1 136d2b1497ba2cca5c9433547436fb01ac4f0181
- SHA512 002bd74ebe037ecd8cb891c0e6655b4a0f5254f257bf9d3e6b950da79d4624929e3dfbe705df12997ede46c8bfe240dd2e5d7dd3a7cfb640007b25c85e8c551b
- SSDEEP 3072:Q7veAbq9sVloR72dTVTTdByTKcbGIgyyy30Gfx:WvlksVPThAGIVyy3
- TLSH T1B7F39C213280C473E567087595E9C6B7AA2AB8714B2185C73BD41BBD7F302E28F79E47
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-09_e77a030bf4d5a70b353f0245e23f8d9e_elex_hijackloader_rhadamanthys_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-09_e77a030bf4d5a70b353f0245e23f8d9e_elex_hijackloader_rhadamanthys_stealc_stop_tofsee
- Size 157KB
- SHA256 02c6beb604ae13b16205336f783540009051bb2bb2447cb6d8639dd742c6865f
- MD5 e77a030bf4d5a70b353f0245e23f8d9e
- SHA1 136d2b1497ba2cca5c9433547436fb01ac4f0181
- SHA512 002bd74ebe037ecd8cb891c0e6655b4a0f5254f257bf9d3e6b950da79d4624929e3dfbe705df12997ede46c8bfe240dd2e5d7dd3a7cfb640007b25c85e8c551b
- SSDEEP 3072:Q7veAbq9sVloR72dTVTTdByTKcbGIgyyy30Gfx:WvlksVPThAGIVyy3
- TLSH T1B7F39C213280C473E567087595E9C6B7AA2AB8714B2185C73BD41BBD7F302E28F79E47
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Healer an antivirus disabler dropper
-
Healer family
-
Modifies Windows Defender Real-time Protection settings
-
Modifies Windows Defender notification settings
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Windows security modification