General
- Target 2026-05-22_8b51be0e0386d7670cf608d2f34258ba_elex_rhadamanthys_stop_swisyn
- Size 293KB
- Sample260522-d5c67sdv7m
- SHA256 e3d29ee2ed7bc54c825231cce380908f4bbe886f23d9ba71e56b1a63090e128c
- MD5 8b51be0e0386d7670cf608d2f34258ba
- SHA1 3ff369ec35918a31d019b5e3c92db24b1ae879fc
- SHA512 3a30c2f27d7b4f52b71aa565b7810a57d467d01a15a7061c06fe92564fcdda120cbab6fe20b899e09d221e8fd7fb0b2878d68e358a4c97cb90da501a7c2bb7c6
- SSDEEP 3072:GVqoCl/YgjxEufVU0TbTyDDalbIkJU9bWh4vXiMntSYx:GsLqdufVUNDaTJU9bF6Yx
- TLSH T100546C137E108077F4298AF1B895865AB97A2D272FE1AC0B7392A7112A3134775FD70F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_8b51be0e0386d7670cf608d2f34258ba_elex_rhadamanthys_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_8b51be0e0386d7670cf608d2f34258ba_elex_rhadamanthys_stop_swisyn.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_8b51be0e0386d7670cf608d2f34258ba_elex_rhadamanthys_stop_swisyn
- Size 293KB
- SHA256 e3d29ee2ed7bc54c825231cce380908f4bbe886f23d9ba71e56b1a63090e128c
- MD5 8b51be0e0386d7670cf608d2f34258ba
- SHA1 3ff369ec35918a31d019b5e3c92db24b1ae879fc
- SHA512 3a30c2f27d7b4f52b71aa565b7810a57d467d01a15a7061c06fe92564fcdda120cbab6fe20b899e09d221e8fd7fb0b2878d68e358a4c97cb90da501a7c2bb7c6
- SSDEEP 3072:GVqoCl/YgjxEufVU0TbTyDDalbIkJU9bWh4vXiMntSYx:GsLqdufVUNDaTJU9bF6Yx
- TLSH T100546C137E108077F4298AF1B895865AB97A2D272FE1AC0B7392A7112A3134775FD70F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory