2026-07-19_5d67a819eb42953edb7ef69d7c44ef2e_elex_rhadamanthys_stop

General

Target
2026-07-19_5d67a819eb42953edb7ef69d7c44ef2e_elex_rhadamanthys_stop
Size 164KB
Sample260719-2e3aeaes4m
SHA256 f555b5a85dedf132150786e00b2880d12699946443dda057aaa5d2135b36e7a2
MD5 5d67a819eb42953edb7ef69d7c44ef2e
SHA1 e682b36ebe5c2f09eb20639fd06e8b17ff355c66
SHA512 eea197da1c64f0e7ecdbf9870eb837ef2cf343b7b5dc7a8b2a1a1a68633a6e4edc010baa107d08a86d307ff9f4c0ddd1340adff667e1df059079f2f90509794c
SSDEEP 1536:iJwyz0eHz4nFqxp/NpUzVQIshEIXhzU0u2xtvYbyg7lj7IC79oyIywVNIsOUCqh0:606/Ni9sH/uOEyclsasDCitZ94
TLSH
T1ECF39E28B9C3C073E84701B544E5C7BA677EB9572F2A55DBFBC00B8D5A242E64F32291
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-19_5d67a819eb42953edb7ef69d7c44ef2e_elex_rhadamanthys_stop

File Explorer

2026-07-19_5d67a819eb42953edb7ef69d7c44ef2e_elex_rhadamanthys_stop

.exe 164KB

2026-07-19_5d67a819eb42953edb7ef69d7c44ef2e_elex_rhadamanthys_stop

IMPHASH 4f80d54aba2cdc54c2ded9df619d5607
SHA256 f555b5a85dedf132150786e00b2880d12699946443dda057aaa5d2135b36e7a2
MD5 5d67a819eb42953edb7ef69d7c44ef2e
SHA1 e682b36ebe5c2f09eb20639fd06e8b17ff355c66
SHA512 eea197da1c64f0e7ecdbf9870eb837ef2cf343b7b5dc7a8b2a1a1a68633a6e4edc010baa107d08a86d307ff9f4c0ddd1340adff667e1df059079f2f90509794c
SSDEEP 1536:iJwyz0eHz4nFqxp/NpUzVQIshEIXhzU0u2xtvYbyg7lj7IC79oyIywVNIsOUCqh0:606/Ni9sH/uOEyclsasDCitZ94
TLSH
T1ECF39E28B9C3C073E84701B544E5C7BA677EB9572F2A55DBFBC00B8D5A242E64F32291
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

46120

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetProcAddress GetModuleHandleA ExitProcess GetCommandLineA GetVersionExA HeapAlloc GetProcessHeap LCMapStringA LCMapStringW GetCPInfo HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetFileType GetStartupInfoA WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer CloseHandle GetModuleFileNameA LoadLibraryA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle GetLocaleInfoW CreateFileA CreateFileW SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-19_5d67a819eb42953edb7ef69d7c44ef2e_elex_rhadamanthys_stop

kernel32

generic