General
- Target 2026-07-14_cf8808d1a0c1e849b67518fe0de63c6f_elex_rhadamanthys_stop
- Size 996KB
- Sample260714-dg8cfacz4r
- SHA256 92dcb0426a203a2b9f5a2b1237a387d0e55926dda268dbfc15d1f9c52f19c0f1
- MD5 cf8808d1a0c1e849b67518fe0de63c6f
- SHA1 460a74231cce7ca5012ce2b9270a40c82c842c73
- SHA512 e9f90c1faa1c7ad9550aac0c1e7b894968cba2affa098f4505a52be47967343f2cc40e2624c5359978d18cc3bbc00cd63bbc8806c45178f880feb8993e841018
- SSDEEP 24576:Ry1Dd70iTWCoS0rA1V389Xuls1XTSv58s4Zwcu:EDd79WCFV38BXTSl4Z
- TLSH T1DA25F11137D08036F1B329768ABF9724542DB8716F7985CFE388162E5E70AE1EA3171B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_cf8808d1a0c1e849b67518fe0de63c6f_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_cf8808d1a0c1e849b67518fe0de63c6f_elex_rhadamanthys_stop
- Size 996KB
- SHA256 92dcb0426a203a2b9f5a2b1237a387d0e55926dda268dbfc15d1f9c52f19c0f1
- MD5 cf8808d1a0c1e849b67518fe0de63c6f
- SHA1 460a74231cce7ca5012ce2b9270a40c82c842c73
- SHA512 e9f90c1faa1c7ad9550aac0c1e7b894968cba2affa098f4505a52be47967343f2cc40e2624c5359978d18cc3bbc00cd63bbc8806c45178f880feb8993e841018
- SSDEEP 24576:Ry1Dd70iTWCoS0rA1V389Xuls1XTSv58s4Zwcu:EDd79WCFV38BXTSl4Z
- TLSH T1DA25F11137D08036F1B329768ABF9724542DB8716F7985CFE388162E5E70AE1EA3171B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1