General
- Target 2026-07-18_2a9f8018186acc13d826e3c8a9717014_elex_rhadamanthys_stop
- Size 992KB
- Sample260718-kerp8sdz3p
- SHA256 31d8b71f55a129372f3e8be3106ce78046e9a61636ba37ceeb3b4eb3b4202c47
- MD5 2a9f8018186acc13d826e3c8a9717014
- SHA1 4993e09bf0b34a0fc98bbd1cf6a450d9bd2abe9b
- SHA512 b89f24a6e02b83a591eb77ee18dd5da2ac09ff1cc509939478b948a46c7c002bef733824a7c9b978f70970bb21b2f9760ce971a7d94266c87b4834d5cd65602b
- SSDEEP 24576:ZX1Dd70iTWCYjUYwFSogf8ZK1+pWZlFmH:7Dd79WCyUEogkmDFm
- TLSH T18B25E01137C0C135F5B329768ABF9724646DB8715F6886CFE3C8162E0E706E1AA35B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_2a9f8018186acc13d826e3c8a9717014_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_2a9f8018186acc13d826e3c8a9717014_elex_rhadamanthys_stop
- Size 992KB
- SHA256 31d8b71f55a129372f3e8be3106ce78046e9a61636ba37ceeb3b4eb3b4202c47
- MD5 2a9f8018186acc13d826e3c8a9717014
- SHA1 4993e09bf0b34a0fc98bbd1cf6a450d9bd2abe9b
- SHA512 b89f24a6e02b83a591eb77ee18dd5da2ac09ff1cc509939478b948a46c7c002bef733824a7c9b978f70970bb21b2f9760ce971a7d94266c87b4834d5cd65602b
- SSDEEP 24576:ZX1Dd70iTWCYjUYwFSogf8ZK1+pWZlFmH:7Dd79WCyUEogkmDFm
- TLSH T18B25E01137C0C135F5B329768ABF9724646DB8715F6886CFE3C8162E0E706E1AA35B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1