General
- Target 2026-07-17_29e5d7c8e6a51660abe7fc2a5dafabfd_elex_rhadamanthys_stop
- Size 992KB
- Sample260717-j9dlesaz4s
- SHA256 072e8aa1d9d1d2259624184609e12f8cc70ba4dc3aa28ad5be035278a059dbfd
- MD5 29e5d7c8e6a51660abe7fc2a5dafabfd
- SHA1 b179ea9c44f5545d25832c76b1dcda8dadee2cb2
- SHA512 97e3e7cf709369f8543023bbe71237f8776443d42ea3d143347d7e6801768ef4e49478f0736018936892968b323855090a59c7d9d224d3077ab1f95d2ad0e11e
- SSDEEP 24576:7r1Dd70iTWChGnkQvhX+hz1hH6GGQD4qJuLRoKd:tDd79WChOkQvhOh7NDVkLuK
- TLSH T16725E01177908135F1B329368ABFE734542DB8715FA985CFE388176E4DB0AE1A930B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_29e5d7c8e6a51660abe7fc2a5dafabfd_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_29e5d7c8e6a51660abe7fc2a5dafabfd_elex_rhadamanthys_stop
- Size 992KB
- SHA256 072e8aa1d9d1d2259624184609e12f8cc70ba4dc3aa28ad5be035278a059dbfd
- MD5 29e5d7c8e6a51660abe7fc2a5dafabfd
- SHA1 b179ea9c44f5545d25832c76b1dcda8dadee2cb2
- SHA512 97e3e7cf709369f8543023bbe71237f8776443d42ea3d143347d7e6801768ef4e49478f0736018936892968b323855090a59c7d9d224d3077ab1f95d2ad0e11e
- SSDEEP 24576:7r1Dd70iTWChGnkQvhX+hz1hH6GGQD4qJuLRoKd:tDd79WChOkQvhOh7NDVkLuK
- TLSH T16725E01177908135F1B329368ABFE734542DB8715FA985CFE388176E4DB0AE1A930B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1