General
- Target 2026-07-09_07de93c951634d0f1f605b565fe036f4_amadey_elex_rhadamanthys_stealc_stop
- Size 1.5MB
- Sample260709-m6bjfaas9v
- SHA256 32ae6d3abf03347e4712492100f48da656c3c6c711561b1f656153a8ad2a4966
- MD5 07de93c951634d0f1f605b565fe036f4
- SHA1 37f3df51a2b80e8c7e7918cca126f0283072784a
- SHA512 da007acd434ee614a83ef26de8b840110264faf581814d4db6a479e2596768adfddbce8c5bdaacfc3b664aae200eb8272439390a37fb503ceed4de5521ed05bb
- SSDEEP 12288:DjndvQSr6XvbGIqBGr1m+91PLfwzWVj1m8Yei97Zdm/Os3T2QKuA79bEIw5czKcq:DLm5qMr1nDjf9n1i99k32tY5cz84
- TLSH T18275E01077D0C036F1B324764EBEC665967DB9712F2191CFA3C0266E6E70AD1A931B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_07de93c951634d0f1f605b565fe036f4_amadey_elex_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_07de93c951634d0f1f605b565fe036f4_amadey_elex_rhadamanthys_stealc_stop
- Size 1.5MB
- SHA256 32ae6d3abf03347e4712492100f48da656c3c6c711561b1f656153a8ad2a4966
- MD5 07de93c951634d0f1f605b565fe036f4
- SHA1 37f3df51a2b80e8c7e7918cca126f0283072784a
- SHA512 da007acd434ee614a83ef26de8b840110264faf581814d4db6a479e2596768adfddbce8c5bdaacfc3b664aae200eb8272439390a37fb503ceed4de5521ed05bb
- SSDEEP 12288:DjndvQSr6XvbGIqBGr1m+91PLfwzWVj1m8Yei97Zdm/Os3T2QKuA79bEIw5czKcq:DLm5qMr1nDjf9n1i99k32tY5cz84
- TLSH T18275E01077D0C036F1B324764EBEC665967DB9712F2191CFA3C0266E6E70AD1A931B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1