General
- Target 2026-07-21_03acf0d2913454b26e1c931c941b9e8c_elex_rhadamanthys_stop
- Size 992KB
- Sample260721-de7ywsds6m
- SHA256 56705e9997f6c7e89a8c2180303ae6e7b2b828f5a51401952cb7066c72f783f1
- MD5 03acf0d2913454b26e1c931c941b9e8c
- SHA1 acae7d285302386cd9abd01f2d9f4746443b7335
- SHA512 3afb459f6b5228ef9a71b4c5e4528ab09ecb97bfbb8aaf5b1f77259c78afb40e081446efa3e8714275e867b73525074c0411155c53f6427f97f736c1e7800ac5
- SSDEEP 12288:kO0wIk0BX3RK0emGd70ioGuVWW6oIVXsVmBpOtWxAkDnTDD7qBNg+KjlsU+dWC:kO1Dd70iTWCV0mHO0AGTD/qBNgrlfLC
- TLSH T13325E11177D0C136F0B329368BBFE725552DB8715FA886CFA388166E1E70AD1A93071B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_03acf0d2913454b26e1c931c941b9e8c_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_03acf0d2913454b26e1c931c941b9e8c_elex_rhadamanthys_stop
- Size 992KB
- SHA256 56705e9997f6c7e89a8c2180303ae6e7b2b828f5a51401952cb7066c72f783f1
- MD5 03acf0d2913454b26e1c931c941b9e8c
- SHA1 acae7d285302386cd9abd01f2d9f4746443b7335
- SHA512 3afb459f6b5228ef9a71b4c5e4528ab09ecb97bfbb8aaf5b1f77259c78afb40e081446efa3e8714275e867b73525074c0411155c53f6427f97f736c1e7800ac5
- SSDEEP 12288:kO0wIk0BX3RK0emGd70ioGuVWW6oIVXsVmBpOtWxAkDnTDD7qBNg+KjlsU+dWC:kO1Dd70iTWCV0mHO0AGTD/qBNgrlfLC
- TLSH T13325E11177D0C136F0B329368BBFE725552DB8715FA886CFA388166E1E70AD1A93071B
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1