General
- Target 2026-07-20_8d0cb0906b74d8f2ad0c965101784c7f_elex_rhadamanthys_stop
- Size 992KB
- Sample260720-dcy8zac18l
- SHA256 0383874f0feaca691edd13e3b404cfca326631cc70910fd97cb30370a841a351
- MD5 8d0cb0906b74d8f2ad0c965101784c7f
- SHA1 dd8430ddf16f91075a658d88d384abb1ab428344
- SHA512 9c1aee28584a6f7bda1e0a4d6ab81cfc6b20cd9333d0e61d0d0fa33736eaf1c71ec8e557955e361ba28ff4f3f0c834014be2f2129a01d9fc172c00e66b34734b
- SSDEEP 24576:aW1Dd70iTWCvT7Jckdwi6i9bNrqq4E41WFpW3oRos:3Dd79WCr7Jckdwi3N7+WTW3
- TLSH T1F525E01077D08136F1B329328B7FE724A56C79611F6986CFA3C8166D5D706E0EA31B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_8d0cb0906b74d8f2ad0c965101784c7f_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_8d0cb0906b74d8f2ad0c965101784c7f_elex_rhadamanthys_stop
- Size 992KB
- SHA256 0383874f0feaca691edd13e3b404cfca326631cc70910fd97cb30370a841a351
- MD5 8d0cb0906b74d8f2ad0c965101784c7f
- SHA1 dd8430ddf16f91075a658d88d384abb1ab428344
- SHA512 9c1aee28584a6f7bda1e0a4d6ab81cfc6b20cd9333d0e61d0d0fa33736eaf1c71ec8e557955e361ba28ff4f3f0c834014be2f2129a01d9fc172c00e66b34734b
- SSDEEP 24576:aW1Dd70iTWCvT7Jckdwi6i9bNrqq4E41WFpW3oRos:3Dd79WCr7Jckdwi3N7+WTW3
- TLSH T1F525E01077D08136F1B329328B7FE724A56C79611F6986CFA3C8166D5D706E0EA31B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1