2026-07-30_90d7764743488123713d63c0027a1e29_elex_rhadamanthys_stop

General

Target
2026-07-30_90d7764743488123713d63c0027a1e29_elex_rhadamanthys_stop
Size 1.3MB
Sample260730-krml2sef28
SHA256 ce77c73f7167b77f89274d1063680e6c49b6de59f55d3d1754ab46e0b30aa0a8
MD5 90d7764743488123713d63c0027a1e29
SHA1 2c66a49698c2487660efd8119728aafa5a67562f
SHA512 2d8f7bf6a6543363ee5d8a940707e34b98ee3ecb1f3eea3d9311ba3c28a9b248672502ae91f66e3a6141afd1577aa73d953648331a74c74a5bf75c71c32827ae
SSDEEP 12288:Ze8CGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMW7:I8CnQ/tbw/2Mkjy6Fr7g0o7
TLSH
T12E5523253812D873E91705B04882C282677F0DB37BF6925BBB742E7DDD792C40AAA35D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_90d7764743488123713d63c0027a1e29_elex_rhadamanthys_stop

File Explorer

2026-07-30_90d7764743488123713d63c0027a1e29_elex_rhadamanthys_stop

.exe 1.3MB

2026-07-30_90d7764743488123713d63c0027a1e29_elex_rhadamanthys_stop

IMPHASH 4e334f82ae1a1601b7ee076d5252bc42
SHA256 ce77c73f7167b77f89274d1063680e6c49b6de59f55d3d1754ab46e0b30aa0a8
MD5 90d7764743488123713d63c0027a1e29
SHA1 2c66a49698c2487660efd8119728aafa5a67562f
SHA512 2d8f7bf6a6543363ee5d8a940707e34b98ee3ecb1f3eea3d9311ba3c28a9b248672502ae91f66e3a6141afd1577aa73d953648331a74c74a5bf75c71c32827ae
SSDEEP 12288:Ze8CGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMW7:I8CnQ/tbw/2Mkjy6Fr7g0o7
TLSH
T12E5523253812D873E91705B04882C282677F0DB37BF6925BBB742E7DDD792C40AAA35D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Recent\ATKRelation\ATK Hotkey\ASDisplaySwitch\release\ASDisplaySwitch.pdb

kernel32

GetCommandLineW GlobalFree CreateThread SetEvent WaitForSingleObject CloseHandle GetCurrentProcessId ProcessIdToSessionId CreateEventW GetLastError OpenEventW WaitForMultipleObjects Sleep GetProcAddress GetModuleHandleW CreateFileW WriteFile LocalAlloc LocalFree FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle RtlUnwind InitializeCriticalSection LoadLibraryA HeapReAlloc VirtualAlloc HeapSize GetConsoleMode GetConsoleCP SetFilePointer HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsA MultiByteToWideChar GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW LeaveCriticalSection EnterCriticalSection GetLocaleInfoA

user32

keybd_event ChangeDisplaySettingsExW EnumDisplaySettingsExW PostMessageW DefWindowProcW PostQuitMessage CreateWindowExW RegisterClassExW LoadCursorW LoadIconW DispatchMessageW TranslateMessage TranslateAcceleratorW GetMessageW GetSystemMetrics

shell32

CommandLineToArgvW

setupapi

SetupDiGetDeviceInterfaceDetailW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInterfaces SetupDiGetClassDevsW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_90d7764743488123713d63c0027a1e29_elex_rhadamanthys_stop

kernel32

user32

shell32

setupapi

generic