General
- Target 2026-07-18_28a5f8d096590bb9e60d20b085e6016a_elex_rhadamanthys_stop
- Size 996KB
- Sample260718-kffdlahs4x
- SHA256 d5d70252ef2eed5b3e03647744aaa424639c4095cd1c41f3eee8805c8db99d9c
- MD5 28a5f8d096590bb9e60d20b085e6016a
- SHA1 50be5b535b46333980e6c86132233f15ee7811af
- SHA512 da9092229745c029f0c4c1e46dd94c9853f1108f1a804fb89a60e7474c5ce23f194b1d30fac993419790dfa53164d1034d750b5d1b33f8d17f8e289c77f828d9
- SSDEEP 24576:cj1Dd70iTWCh3r535PG1R1JUb6Zo+ihl4CNgN:2Dd79WCht3Af1JjZonH4H
- TLSH T1BF25E01077D08136F1B329368BBFE724552CB8715F6982CFA388166E5D70AE1EA3171B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_28a5f8d096590bb9e60d20b085e6016a_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_28a5f8d096590bb9e60d20b085e6016a_elex_rhadamanthys_stop
- Size 996KB
- SHA256 d5d70252ef2eed5b3e03647744aaa424639c4095cd1c41f3eee8805c8db99d9c
- MD5 28a5f8d096590bb9e60d20b085e6016a
- SHA1 50be5b535b46333980e6c86132233f15ee7811af
- SHA512 da9092229745c029f0c4c1e46dd94c9853f1108f1a804fb89a60e7474c5ce23f194b1d30fac993419790dfa53164d1034d750b5d1b33f8d17f8e289c77f828d9
- SSDEEP 24576:cj1Dd70iTWCh3r535PG1R1JUb6Zo+ihl4CNgN:2Dd79WCht3Af1JjZonH4H
- TLSH T1BF25E01077D08136F1B329368BBFE724552CB8715F6982CFA388166E5D70AE1EA3171B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1