General
- Target 2026-07-02_a1742ca20f6a02baf1f2841cbe9a2067_elex_rhadamanthys_stealc_stop_tofsee
- Size 1.4MB
- Sample260702-nbb26agx7z
- SHA256 0405db8a249a458894af7bd12d6f61445e6a4fcd6b31cd81186bef66bfb2dcc2
- MD5 a1742ca20f6a02baf1f2841cbe9a2067
- SHA1 f44e53ab7a480f6c8497be700065316911a74c3b
- SHA512 80677d69c0d44e2099da01206d7e15e626a2ed7deb346a150c17cad241c09b08221fa17c8c1c5251b7a38f60f4600900c79919f792d59a54851c85208eaf931d
- SSDEEP 12288:kf5mM8enLQ2OHXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDR:kfwMnLOHsqjnhMgeiCl7G0nehbGZpbD
- TLSH T192650238B681D0B7D977087105B9E33A6C7EBA25173844D3BBA92DBD6E311D0873934A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_a1742ca20f6a02baf1f2841cbe9a2067_elex_rhadamanthys_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_a1742ca20f6a02baf1f2841cbe9a2067_elex_rhadamanthys_stealc_stop_tofsee
- Size 1.4MB
- SHA256 0405db8a249a458894af7bd12d6f61445e6a4fcd6b31cd81186bef66bfb2dcc2
- MD5 a1742ca20f6a02baf1f2841cbe9a2067
- SHA1 f44e53ab7a480f6c8497be700065316911a74c3b
- SHA512 80677d69c0d44e2099da01206d7e15e626a2ed7deb346a150c17cad241c09b08221fa17c8c1c5251b7a38f60f4600900c79919f792d59a54851c85208eaf931d
- SSDEEP 12288:kf5mM8enLQ2OHXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDR:kfwMnLOHsqjnhMgeiCl7G0nehbGZpbD
- TLSH T192650238B681D0B7D977087105B9E33A6C7EBA25173844D3BBA92DBD6E311D0873934A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1