2026-07-21_355cbc57eab4506ef48b314d701e7b8e_elex_rhadamanthys_stop

General

Target
2026-07-21_355cbc57eab4506ef48b314d701e7b8e_elex_rhadamanthys_stop
Size 656KB
Sample260721-c99wasew2x
SHA256 dde7bebaf190d98489808ab53bd41034861911d841d8c00e871eb4cc45ee86f2
MD5 355cbc57eab4506ef48b314d701e7b8e
SHA1 48738293d4189fbf67724765d4f9c95a46ff58be
SHA512 dfcf433114b17a3c9960653ae811b28b311c0953e03e4a4a67e63e906138cadb9ae49ca606fa44ada280638862dbc23579a67db34f78ec33ac8e53e89ba7f2c5
SSDEEP 12288:OK+GllEdTUZO3ReC7yucYAXraSrwqPnz61QkZYMwZsDiAIpm+CI:OZG3EuUnmtXeuw6BBwD0vC
TLSH
T15BE4120B79878032F41945749CA443C71BFEAE53B9E2F11FFF90110B6D6264A8E6A6F1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-21_355cbc57eab4506ef48b314d701e7b8e_elex_rhadamanthys_stop

File Explorer

2026-07-21_355cbc57eab4506ef48b314d701e7b8e_elex_rhadamanthys_stop

.exe 656KB

2026-07-21_355cbc57eab4506ef48b314d701e7b8e_elex_rhadamanthys_stop

IMPHASH 64383608866abcc261aa0b297061facf
SHA256 dde7bebaf190d98489808ab53bd41034861911d841d8c00e871eb4cc45ee86f2
MD5 355cbc57eab4506ef48b314d701e7b8e
SHA1 48738293d4189fbf67724765d4f9c95a46ff58be
SHA512 dfcf433114b17a3c9960653ae811b28b311c0953e03e4a4a67e63e906138cadb9ae49ca606fa44ada280638862dbc23579a67db34f78ec33ac8e53e89ba7f2c5
SSDEEP 12288:OK+GllEdTUZO3ReC7yucYAXraSrwqPnz61QkZYMwZsDiAIpm+CI:OZG3EuUnmtXeuw6BBwD0vC
TLSH
T15BE4120B79878032F41945749CA443C71BFEAE53B9E2F11FFF90110B6D6264A8E6A6F1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14757

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\qttest\solution1\release\ChangerIp.pdb

iphlpapi

GetAdaptersAddresses

ws2_32

inet_ntoa

kernel32

ReadFile GetModuleFileNameW CreateFileW CloseHandle CreateProcessW GetLastError GetExitCodeThread WaitForSingleObject TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetVersionExA HeapAlloc GetProcessHeap RaiseException GetModuleHandleA GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA MultiByteToWideChar GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSection RtlUnwind GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA WideCharToMultiByte LCMapStringW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-21_355cbc57eab4506ef48b314d701e7b8e_elex_rhadamanthys_stop

iphlpapi

ws2_32

kernel32

generic