General
- Target 2026-07-18_12779dc5b0eeab8dfd89e66feb8e045c_elex_rhadamanthys_stop
- Size 992KB
- Sample260718-kqwtbshw51
- SHA256 d259c41f03b6b05e774088aff74cbc1638fb7967bb45d2ccb39614afedb0495c
- MD5 12779dc5b0eeab8dfd89e66feb8e045c
- SHA1 2a292ba1d6667b6e5f2fadba697eba86498866d2
- SHA512 89db4acdbcd65b7474666b0431f8456ff05fb0c97fd5b8dc1cfee48d2f70c6fb07ee8babe67bb02ec20863b4b735221404ddfad2680b8684e2a37e56cfd085e0
- SSDEEP 12288:F70wIk0BX3RK0emGd70ioGuVWW6oIoMhfdDAken+yFV/a+SqH3h53D3Jf5KOrnTA:F71Dd70iTWCXNW+wXbT3JhKOwOC5
- TLSH T1D725F01037D0C136F1B329768A7FE729556C78315FA886CFE388066E5E706E1A931B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_12779dc5b0eeab8dfd89e66feb8e045c_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_12779dc5b0eeab8dfd89e66feb8e045c_elex_rhadamanthys_stop
- Size 992KB
- SHA256 d259c41f03b6b05e774088aff74cbc1638fb7967bb45d2ccb39614afedb0495c
- MD5 12779dc5b0eeab8dfd89e66feb8e045c
- SHA1 2a292ba1d6667b6e5f2fadba697eba86498866d2
- SHA512 89db4acdbcd65b7474666b0431f8456ff05fb0c97fd5b8dc1cfee48d2f70c6fb07ee8babe67bb02ec20863b4b735221404ddfad2680b8684e2a37e56cfd085e0
- SSDEEP 12288:F70wIk0BX3RK0emGd70ioGuVWW6oIoMhfdDAken+yFV/a+SqH3h53D3Jf5KOrnTA:F71Dd70iTWCXNW+wXbT3JhKOwOC5
- TLSH T1D725F01037D0C136F1B329768A7FE729556C78315FA886CFE388066E5E706E1A931B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1