General
- Target 2026-07-15_3896f7ff6c5a44dda57d514ac727b78b_elex_karagany_mafia_rhadamanthys
- Size 422KB
- Sample260715-s5pybsfx9k
- SHA256 ba32f2e54db6e3eab793a1100e2903b1ed4aa9cfdfdc5f8b7f697f96b0ac38fb
- MD5 3896f7ff6c5a44dda57d514ac727b78b
- SHA1 d0b0c6b944c50b433673823f35eea2e2a3168b4e
- SHA512 5248fbe991e75ff81d740df5bfea7bbfd1f45fdde838af4a23e6d326641412a86cf05e0e958d7cb323178e4b4f7d7cfceff70eae8b841ef39833d14fa01a4ef4
- SSDEEP 12288:6WEBd3X3uEbsM0lZ0uA67K/R+1fjQkpQRP9D:tEBd3X3TbvuA6GRIQkqr
- TLSH T19B94DF11B6C4C032D562273989B3DBB14A3ABC715D618E9B7FCE367E2E346D1830A356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_3896f7ff6c5a44dda57d514ac727b78b_elex_karagany_mafia_rhadamanthys.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_3896f7ff6c5a44dda57d514ac727b78b_elex_karagany_mafia_rhadamanthys.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_3896f7ff6c5a44dda57d514ac727b78b_elex_karagany_mafia_rhadamanthys
- Size 422KB
- SHA256 ba32f2e54db6e3eab793a1100e2903b1ed4aa9cfdfdc5f8b7f697f96b0ac38fb
- MD5 3896f7ff6c5a44dda57d514ac727b78b
- SHA1 d0b0c6b944c50b433673823f35eea2e2a3168b4e
- SHA512 5248fbe991e75ff81d740df5bfea7bbfd1f45fdde838af4a23e6d326641412a86cf05e0e958d7cb323178e4b4f7d7cfceff70eae8b841ef39833d14fa01a4ef4
- SSDEEP 12288:6WEBd3X3uEbsM0lZ0uA67K/R+1fjQkpQRP9D:tEBd3X3TbvuA6GRIQkqr
- TLSH T19B94DF11B6C4C032D562273989B3DBB14A3ABC715D618E9B7FCE367E2E346D1830A356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application