General
- Target 2026-07-27_ea8bb16c5f30aa9684cc3f4a2e4c41a3_elex_rhadamanthys_stop_swisyn
- Size 477KB
- Sample260727-xbt3eazvb1
- SHA256 d5559e102399debdd11c159b8d778888b716e2dc06b83f9721d43a90fb1816e7
- MD5 ea8bb16c5f30aa9684cc3f4a2e4c41a3
- SHA1 242b4723cd05258cc262a50b30c34288cf92830b
- SHA512 3b80fb982792225e2c73b88911dc0f8f4c328f089814e48b996fd4eecd6d85d28d7ebc07426ee5b3bf62a194015f47afe2685ac0fc0b06abc75a106fbfb89fbe
- SSDEEP 12288:PFUNDazolrTzYJtEaWdaK2ReNKeRTrDLnnQTreR:PFOaslrT0zWlRTrDjQTr8
- TLSH T18DA4AE127D40C136D5A240F18DFDEB3DB939AE210BA468C373D42B846AB56D376B634B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_ea8bb16c5f30aa9684cc3f4a2e4c41a3_elex_rhadamanthys_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_ea8bb16c5f30aa9684cc3f4a2e4c41a3_elex_rhadamanthys_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_ea8bb16c5f30aa9684cc3f4a2e4c41a3_elex_rhadamanthys_stop_swisyn
- Size 477KB
- SHA256 d5559e102399debdd11c159b8d778888b716e2dc06b83f9721d43a90fb1816e7
- MD5 ea8bb16c5f30aa9684cc3f4a2e4c41a3
- SHA1 242b4723cd05258cc262a50b30c34288cf92830b
- SHA512 3b80fb982792225e2c73b88911dc0f8f4c328f089814e48b996fd4eecd6d85d28d7ebc07426ee5b3bf62a194015f47afe2685ac0fc0b06abc75a106fbfb89fbe
- SSDEEP 12288:PFUNDazolrTzYJtEaWdaK2ReNKeRTrDLnnQTreR:PFOaslrT0zWlRTrDjQTr8
- TLSH T18DA4AE127D40C136D5A240F18DFDEB3DB939AE210BA468C373D42B846AB56D376B634B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory