General
- Target 2026-07-20_95e1220bf880f14ef00caf6ca8cd9fbe_elex_rhadamanthys_stop
- Size 148KB
- Sample260720-k8rx4afv2z
- SHA256 e249bc0003f6f0046b0c663e67209b4a90e8dad3d27006faaa547410fa0d56f1
- MD5 95e1220bf880f14ef00caf6ca8cd9fbe
- SHA1 ab21b13f4df33d5df405f20264447f568d85e53c
- SHA512 a2af90c3303feed4c36191b4927d54cb8659d45159729c9f0c0204cbdfbf6c88cbfe06058aa4ff619ef291a1a373274a87cdf70fbc9b9833370de3106f6fd4e8
- SSDEEP 1536:hkwph3LEMqIsk+DEDhqSrteUv3UC0rr9l8LFe5rV6Et7Ec9Eccdk1yq+Me61BW+n:zNqDVke5r/t7nXAq+MJLWFXkGN1sa31Y
- TLSH T1FFE3390279818272D83C0DF061FBCAD2CE3AEC8E66EDF053AFC84D560A512C157EA597
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-20_95e1220bf880f14ef00caf6ca8cd9fbe_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_95e1220bf880f14ef00caf6ca8cd9fbe_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_95e1220bf880f14ef00caf6ca8cd9fbe_elex_rhadamanthys_stop
- Size 148KB
- SHA256 e249bc0003f6f0046b0c663e67209b4a90e8dad3d27006faaa547410fa0d56f1
- MD5 95e1220bf880f14ef00caf6ca8cd9fbe
- SHA1 ab21b13f4df33d5df405f20264447f568d85e53c
- SHA512 a2af90c3303feed4c36191b4927d54cb8659d45159729c9f0c0204cbdfbf6c88cbfe06058aa4ff619ef291a1a373274a87cdf70fbc9b9833370de3106f6fd4e8
- SSDEEP 1536:hkwph3LEMqIsk+DEDhqSrteUv3UC0rr9l8LFe5rV6Et7Ec9Eccdk1yq+Me61BW+n:zNqDVke5r/t7nXAq+MJLWFXkGN1sa31Y
- TLSH T1FFE3390279818272D83C0DF061FBCAD2CE3AEC8E66EDF053AFC84D560A512C157EA597
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1