General
- Target 2026-07-01_ff1348c66ac40c37d99ed891a24cf7bd_elex_rhadamanthys_stop
- Size 992KB
- Sample260701-hs221saw7x
- SHA256 c6111e7842d353b40d9fc43770f8a3706b63792c67a9e910e916ed61b6585748
- MD5 ff1348c66ac40c37d99ed891a24cf7bd
- SHA1 b663579be7688dfde75679b2a4751d08977ad1ab
- SHA512 2987ddd266774a650bd52bbc892a44158a5dc094ff3a0deefbfd2474e5c63c87a92e0cdd658df19ca38cf64aa653132aa5e35a84bc0765f9cb57d6f8cfb550d1
- SSDEEP 24576:ON1Dd70iTWC2qNFanFOQwCXeh8W+f/1Db+++gYACNuQ:ODd79WC2CFyOWuh8Fd+jNuQ
- TLSH T17B25F01177D08136F1A329768ABFD728546DB8721F7841CFE388162E5DB06E1EA3472B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_ff1348c66ac40c37d99ed891a24cf7bd_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_ff1348c66ac40c37d99ed891a24cf7bd_elex_rhadamanthys_stop
- Size 992KB
- SHA256 c6111e7842d353b40d9fc43770f8a3706b63792c67a9e910e916ed61b6585748
- MD5 ff1348c66ac40c37d99ed891a24cf7bd
- SHA1 b663579be7688dfde75679b2a4751d08977ad1ab
- SHA512 2987ddd266774a650bd52bbc892a44158a5dc094ff3a0deefbfd2474e5c63c87a92e0cdd658df19ca38cf64aa653132aa5e35a84bc0765f9cb57d6f8cfb550d1
- SSDEEP 24576:ON1Dd70iTWC2qNFanFOQwCXeh8W+f/1Db+++gYACNuQ:ODd79WC2CFyOWuh8Fd+jNuQ
- TLSH T17B25F01177D08136F1A329768ABFD728546DB8721F7841CFE388162E5DB06E1EA3472B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1