General
- Target 2026-07-20_a1b75996d92dba0c123f6b85831b4e8a_elex_rhadamanthys_stop
- Size 992KB
- Sample260720-c856qafx2s
- SHA256 8771873f7b2b0ee41b1b77f6eed32f47b9efc16d8919d9a6be7e6186d5743083
- MD5 a1b75996d92dba0c123f6b85831b4e8a
- SHA1 9252ef3a2b3f4836c4c2182ad6a5239c1055a732
- SHA512 20b4a9dddc2464a8d355fd17b573eb8afc5e0c3d3b6dd5a2b56dd1bde17a8e6f513b4ed5715fe8ce1d7c64490cb69a4c0cf978c0fa1c99428c9b54c1208d3793
- SSDEEP 24576:291Dd70iTWChWLEkgXWHiYKbfZB1v3adCMW:ODd79WCYcfT1S1
- TLSH T1DA25E01137D08139F1B329368B7FD724652C78B15F6886CFA388166E5EB06E1EA3171B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_a1b75996d92dba0c123f6b85831b4e8a_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_a1b75996d92dba0c123f6b85831b4e8a_elex_rhadamanthys_stop
- Size 992KB
- SHA256 8771873f7b2b0ee41b1b77f6eed32f47b9efc16d8919d9a6be7e6186d5743083
- MD5 a1b75996d92dba0c123f6b85831b4e8a
- SHA1 9252ef3a2b3f4836c4c2182ad6a5239c1055a732
- SHA512 20b4a9dddc2464a8d355fd17b573eb8afc5e0c3d3b6dd5a2b56dd1bde17a8e6f513b4ed5715fe8ce1d7c64490cb69a4c0cf978c0fa1c99428c9b54c1208d3793
- SSDEEP 24576:291Dd70iTWChWLEkgXWHiYKbfZB1v3adCMW:ODd79WCYcfT1S1
- TLSH T1DA25E01137D08139F1B329368B7FD724652C78B15F6886CFA388166E5EB06E1EA3171B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1