General
- Target 2026-07-04_1b87568cb967fb105a743ec3471296db_elex_rhadamanthys_stop
- Size 996KB
- Sample260704-ya5m7acy4t
- SHA256 68b5ed7210688e708fa4cee9348669f38bce77169256cd9178faae4cd224f9cc
- MD5 1b87568cb967fb105a743ec3471296db
- SHA1 2c6e5c80269563a25b2bb84f15123f9c477d7230
- SHA512 0285f7c5a7b8f8f4effc5df8cd491890c7e6a3d7f8a38d75f5eda8b3230e36b10dae097ef684c1bf98951ffe14dffd0d940b90f3567f73081b8661fd0fbeb892
- SSDEEP 24576:LQ1Dd70iTWC3R/l2DNlVjybcmUJaQwi5ENAYW2DD7sDa6cCA2h6uCYYU4:ADd79WC3lfkJV55EGBzcCjzcU
- TLSH T1BC25E01077D18036F0B328368ABFE728656CB8711F6986CFA3881B6E5D706D1E93571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_1b87568cb967fb105a743ec3471296db_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_1b87568cb967fb105a743ec3471296db_elex_rhadamanthys_stop
- Size 996KB
- SHA256 68b5ed7210688e708fa4cee9348669f38bce77169256cd9178faae4cd224f9cc
- MD5 1b87568cb967fb105a743ec3471296db
- SHA1 2c6e5c80269563a25b2bb84f15123f9c477d7230
- SHA512 0285f7c5a7b8f8f4effc5df8cd491890c7e6a3d7f8a38d75f5eda8b3230e36b10dae097ef684c1bf98951ffe14dffd0d940b90f3567f73081b8661fd0fbeb892
- SSDEEP 24576:LQ1Dd70iTWC3R/l2DNlVjybcmUJaQwi5ENAYW2DD7sDa6cCA2h6uCYYU4:ADd79WC3lfkJV55EGBzcCjzcU
- TLSH T1BC25E01077D18036F0B328368ABFE728656CB8711F6986CFA3881B6E5D706D1E93571B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1