General
- Target 2026-07-29_dabe286713bbab309a329b97023cc78c_elex_rhadamanthys_stop
- Size 996KB
- Sample260729-13ectawydv
- SHA256 a967bc01ea7bcece8da64c4d2304310b2164f339b69c120ddc46dc92628a805b
- MD5 dabe286713bbab309a329b97023cc78c
- SHA1 80c28eda6b1bc983aa41a51c21612f68e348a806
- SHA512 228c803d783ed2ce1d61f4a8b9ee7ff69a61ca8682c8fe713857771064430a5a81d9beccd91eb8cb9e2a21422eee780ab748d65e6de5e76ec84d36e6440c3108
- SSDEEP 24576:/a1Dd70iTWC9WifzjK70qZ/h3zuIjVZtrtV:qDd79WCgi/KgyVZN
- TLSH T1ED25E02037D08136F5B319378B7FD724602DB9B25F6985CFA384166E5A706E0EA3172B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_dabe286713bbab309a329b97023cc78c_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_dabe286713bbab309a329b97023cc78c_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_dabe286713bbab309a329b97023cc78c_elex_rhadamanthys_stop
- Size 996KB
- SHA256 a967bc01ea7bcece8da64c4d2304310b2164f339b69c120ddc46dc92628a805b
- MD5 dabe286713bbab309a329b97023cc78c
- SHA1 80c28eda6b1bc983aa41a51c21612f68e348a806
- SHA512 228c803d783ed2ce1d61f4a8b9ee7ff69a61ca8682c8fe713857771064430a5a81d9beccd91eb8cb9e2a21422eee780ab748d65e6de5e76ec84d36e6440c3108
- SSDEEP 24576:/a1Dd70iTWC9WifzjK70qZ/h3zuIjVZtrtV:qDd79WCgi/KgyVZN
- TLSH T1ED25E02037D08136F5B319378B7FD724602DB9B25F6985CFA384166E5A706E0EA3172B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1