2026-05-04_e123cfab6b20bb0cea5ec78f37ddf279_elex_karagany_mafia_rhadamanthys

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-04_e123cfab6b20bb0cea5ec78f37ddf279_elex_karagany_mafia_rhadamanthys
Size 1.5MB
Sample260504-p8dspact2s
SHA256 c6e41a9fc42d631674c23329d08c2a18d23aeb4ae5ec5ada43d57ded61ef3509
MD5 e123cfab6b20bb0cea5ec78f37ddf279
SHA1 82a6f34f95874828a79c07499fb752c785152ebb
SHA512 49b41abe471d36012141c1ad4cf0b4a16debb06a86fb9b8e28af6ae8b2c30178654b6e685c4e5524555731a64ff11f5aa7892b177581ae7b888400507cdc35f1
SSDEEP 12288:sW79VpvY3B1nGxnZj8Uy8wQuqiR/SAC2qma5SrrmfPG68UoVmzx3Fi5uye:swtY3BsVZl+KGqmSSrmG68tV0OA
TLSH
T13D75122132D1D072D4D710718AB8DAB2493EB8709BB419CFF3941A7E1E79BD18C7A71A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-04_e123cfab6b20bb0cea5ec78f37ddf279_elex_karagany_mafia_rhadamanthys

File Explorer

2026-05-04_e123cfab6b20bb0cea5ec78f37ddf279_elex_karagany_mafia_rhadamanthys

.exe 1.5MB

2026-05-04_e123cfab6b20bb0cea5ec78f37ddf279_elex_karagany_mafia_rhadamanthys

IMPHASH 413563bcc45cfb8b175bbc8c194c47fd
SHA256 c6e41a9fc42d631674c23329d08c2a18d23aeb4ae5ec5ada43d57ded61ef3509
MD5 e123cfab6b20bb0cea5ec78f37ddf279
SHA1 82a6f34f95874828a79c07499fb752c785152ebb
SHA512 49b41abe471d36012141c1ad4cf0b4a16debb06a86fb9b8e28af6ae8b2c30178654b6e685c4e5524555731a64ff11f5aa7892b177581ae7b888400507cdc35f1
SSDEEP 12288:sW79VpvY3B1nGxnZj8Uy8wQuqiR/SAC2qma5SrrmfPG68UoVmzx3Fi5uye:swtY3BsVZl+KGqmSSrmG68tV0OA
TLSH
T13D75122132D1D072D4D710718AB8DAB2493EB8709BB419CFF3941A7E1E79BD18C7A71A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31867

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\ccViews\autobuild1_BR-1206-0NXW_8.1_Snapshot\AMT_Development\SW\Src\Apps\FWUpdate\LocalWin\IntelMeFwService\Release\IntelMeFwService.pdb

setupapi

SetupDiGetClassDevsA SetupDiGetDeviceInterfaceDetailA SetupDiEnumDeviceInterfaces SetupDiDestroyDeviceInfoList

kernel32

SetFileAttributesA GetModuleFileNameA CreateMutexA CreateNamedPipeA GetVersionExA CreateThread FlushFileBuffers DisconnectNamedPipe ConnectNamedPipe InterlockedDecrement GetConsoleScreenBufferInfo GetStdHandle SetConsoleTextAttribute CloseHandle DeviceIoControl GetLastError GetOverlappedResult ReadFile CreateEventA Sleep WriteFile FormatMessageA WaitForSingleObject CreateFileA HeapReAlloc ReleaseMutex LeaveCriticalSection LocalFree lstrlenA GetProcessHeap SetEndOfFile SetStdHandle GetStringTypeW LoadLibraryW WriteConsoleW HeapFree HeapAlloc DecodePointer EncodePointer EnterCriticalSection ReadConsoleInputA SetConsoleMode GetConsoleMode GetCommandLineW HeapSetInformation TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate GetProcAddress GetModuleHandleW ExitProcess GetModuleFileNameW GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection WideCharToMultiByte GetConsoleCP RtlUnwind LCMapStringW MultiByteToWideChar CreateFileW IsProcessorFeaturePresent RaiseException HeapSize SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime

advapi32

StartServiceA CreateServiceA DeleteService ControlService OpenSCManagerA SetServiceStatus QueryServiceStatus ReportEventA SetSecurityDescriptorDacl InitializeSecurityDescriptor DeregisterEventSource RegisterServiceCtrlHandlerA ChangeServiceConfig2A StartServiceCtrlDispatcherA RegisterEventSourceA CloseServiceHandle OpenServiceA RegCloseKey RegFlushKey RegDeleteValueA RegCreateKeyExA RegDeleteKeyA RegSetValueExA RegOpenKeyExA RegQueryValueExA QueryServiceStatusEx

ole32

CoUninitialize CoInitializeSecurity CoInitializeEx CoCreateInstance CoSetProxyBlanket

oleaut32

SysFreeString VariantClear SysAllocString

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-04_e123cfab6b20bb0cea5ec78f37ddf279_elex_karagany_mafia_rhadamanthys

setupapi

kernel32

advapi32

ole32

oleaut32

generic