General
- Target 2026-07-20_fd0f2dc492cc80164d3e49167589668a_elex_rhadamanthys_stop
- Size 992KB
- Sample260720-csrcmae12s
- SHA256 c45de23dfec12dacf9c99956d94f8c06f46349c9fcbba403b270751c3e087443
- MD5 fd0f2dc492cc80164d3e49167589668a
- SHA1 2b0e70276510e2d0cc0fd35c37b3eb168a2f591c
- SHA512 2c224acb934a5c2f756957f5deef8300dc270a769244ed68ab05d97c31a1581a2a3aaeb6e8c0c2ffc5fce634457df756fcf9fb096b5d88206e2a350a976947ae
- SSDEEP 12288:Ja0wIk0BX3RK0emGd70ioGuVWW6oIqpVzbsVSjcrFCeoQ83J1+WevqmLzUqSer:Ja1Dd70iTWCqpBbsVLFdoQ8b5CqmLYq
- TLSH T10F25E02177908135F0B328768BBFD724546CB9715F6986CFA3881B2E5D70AE1E630B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_fd0f2dc492cc80164d3e49167589668a_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_fd0f2dc492cc80164d3e49167589668a_elex_rhadamanthys_stop
- Size 992KB
- SHA256 c45de23dfec12dacf9c99956d94f8c06f46349c9fcbba403b270751c3e087443
- MD5 fd0f2dc492cc80164d3e49167589668a
- SHA1 2b0e70276510e2d0cc0fd35c37b3eb168a2f591c
- SHA512 2c224acb934a5c2f756957f5deef8300dc270a769244ed68ab05d97c31a1581a2a3aaeb6e8c0c2ffc5fce634457df756fcf9fb096b5d88206e2a350a976947ae
- SSDEEP 12288:Ja0wIk0BX3RK0emGd70ioGuVWW6oIqpVzbsVSjcrFCeoQ83J1+WevqmLzUqSer:Ja1Dd70iTWCqpBbsVLFdoQ8b5CqmLYq
- TLSH T10F25E02177908135F0B328768BBFD724546CB9715F6986CFA3881B2E5D70AE1E630B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1