2026-06-26_d8a8bba6baa485798b3e8b934edee5a3_elex_magniber_nymaim_rhadamanthys_stop

General

Target
2026-06-26_d8a8bba6baa485798b3e8b934edee5a3_elex_magniber_nymaim_rhadamanthys_stop
Size 3.2MB
Sample260629-n2n5eact6v
SHA256 0a82bfc51dff1e04f9a4519124fa65af7fd64b203c757c8abc2cc106c381e3f8
MD5 d8a8bba6baa485798b3e8b934edee5a3
SHA1 5cc566e17d896f19a1d1a53e236b6e4bdcbbf1be
SHA512 8ca0841c48d51c45257f31fdd2d0979a513bbf522afba60c2a43b970cac65d5038f9786bfb43b2183d84fbe13d07c7a3d8b5909783b9a0895a15d8bfa20ebeaa
SSDEEP 49152:a0MDRZ9IBVL+s0ezJGd80SHMsThF35Hj1BzupfJ:a0MDtIXLr06AdfEThF35PzuRJ
TLSH
T1E6F5125533B0C0B2E48211B2DD2AD1F45275BC30DB64A6DB3AE17F5E7A312E19A39BC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-26_d8a8bba6baa485798b3e8b934edee5a3_elex_magniber_nymaim_rhadamanthys_stop

File Explorer

2026-06-26_d8a8bba6baa485798b3e8b934edee5a3_elex_magniber_nymaim_rhadamanthys_stop

.exe 3.2MB

2026-06-26_d8a8bba6baa485798b3e8b934edee5a3_elex_magniber_nymaim_rhadamanthys_stop

IMPHASH 26db5052cd8ede8ee590a842731769c5
SHA256 0a82bfc51dff1e04f9a4519124fa65af7fd64b203c757c8abc2cc106c381e3f8
MD5 d8a8bba6baa485798b3e8b934edee5a3
SHA1 5cc566e17d896f19a1d1a53e236b6e4bdcbbf1be
SHA512 8ca0841c48d51c45257f31fdd2d0979a513bbf522afba60c2a43b970cac65d5038f9786bfb43b2183d84fbe13d07c7a3d8b5909783b9a0895a15d8bfa20ebeaa
SSDEEP 49152:a0MDRZ9IBVL+s0ezJGd80SHMsThF35Hj1BzupfJ:a0MDtIXLr06AdfEThF35PzuRJ
TLSH
T1E6F5125533B0C0B2E48211B2DD2AD1F45275BC30DB64A6DB3AE17F5E7A312E19A39BC4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15171

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA LockResource LoadResource SizeofResource FindResourceA WideCharToMultiByte MultiByteToWideChar WriteFile DeleteFileA CreateDirectoryA GetProcAddress LoadLibraryA lstrcatA GetSystemTime GetModuleHandleA GetModuleFileNameA GetTempPathA GetFileSize WaitForSingleObject ResumeThread SetThreadPriority CreateThread GetStringTypeA LCMapStringW LCMapStringA SetEndOfFile GetOEMCP GetACP GetCPInfo IsBadCodePtr IsBadReadPtr FlushFileBuffers SetStdHandle SetUnhandledExceptionFilter GetComputerNameA CloseHandle GetFileType GetStdHandle HeapAlloc RtlUnwind GetStartupInfoA GetCommandLineA GetVersion ExitProcess HeapFree RaiseException GetLastError HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc IsBadWritePtr ReadFile TerminateProcess GetCurrentProcess SetFilePointer HeapSize UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStringTypeW

user32

DefWindowProcA PostQuitMessage DestroyWindow CreateWindowExA ShowWindow GetMessageA TranslateMessage DispatchMessageA GetDesktopWindow RegisterClassExA

shell32

SHGetSpecialFolderPathA

advapi32

GetUserNameA

shlwapi

PathFileExistsA

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-26_d8a8bba6baa485798b3e8b934edee5a3_elex_magniber_nymaim_rhadamanthys_stop

kernel32

user32

shell32

advapi32

shlwapi

generic