General
- Target 2026-07-20_64fb74156be3bd1bf634b57ecdffd714_elex_rhadamanthys_stop
- Size 992KB
- Sample260720-dks2xsf17s
- SHA256 7366c33b3de648e983cc7aa0eef1f02861c17893404b6bcb7129813b5200bdcf
- MD5 64fb74156be3bd1bf634b57ecdffd714
- SHA1 ebe3ecb0e62a5521102c1bdb9da221671f223b32
- SHA512 0a8c389d94139c633ea8474f5eed0aba6f282c9ce082f1433864990768c76b2d17848a55891dda9d795fcfdfa7999b873615ea15f3d05c110390edbf9bcd154b
- SSDEEP 24576:291Dd70iTWCEWLEkgXWHiYKbfZB1v3adCMW:ODd79WCVcfT1S1
- TLSH T16925E01137D08139F1B329368B7FD724652C78B15F6885CFA388166E5EB0AE1EA3171B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_64fb74156be3bd1bf634b57ecdffd714_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_64fb74156be3bd1bf634b57ecdffd714_elex_rhadamanthys_stop
- Size 992KB
- SHA256 7366c33b3de648e983cc7aa0eef1f02861c17893404b6bcb7129813b5200bdcf
- MD5 64fb74156be3bd1bf634b57ecdffd714
- SHA1 ebe3ecb0e62a5521102c1bdb9da221671f223b32
- SHA512 0a8c389d94139c633ea8474f5eed0aba6f282c9ce082f1433864990768c76b2d17848a55891dda9d795fcfdfa7999b873615ea15f3d05c110390edbf9bcd154b
- SSDEEP 24576:291Dd70iTWCEWLEkgXWHiYKbfZB1v3adCMW:ODd79WCVcfT1S1
- TLSH T16925E01137D08139F1B329368B7FD724652C78B15F6885CFA388166E5EB0AE1EA3171B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1