2026-07-30_0d26d20f78162595614cbf4bff9ffa04_elex_rhadamanthys_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_0d26d20f78162595614cbf4bff9ffa04_elex_rhadamanthys_stop
Size 61KB
Sample260730-wtqx2add49
SHA256 1e527b5f9fd9664f417a9e3b932421218c94a13baec654a70d52663f964acea8
MD5 0d26d20f78162595614cbf4bff9ffa04
SHA1 d202ff84db06ff95c9c2ff74ec35fc4c3b7b2912
SHA512 3ba070f925cfb98d5159221fd10246d1ddb06795ef3921a3be6ba897bed0e17a52d37f190aa39de341f0e1b0ca3dd2dc84b9006eb9af12408e6ec9f0a0e928b1
SSDEEP 1536:Zttdse4OcUmWQIvEPZo6E5sEFd29NQgA2w6TNle5:Zdse4OlQZo6EKEFdGM29le5
TLSH
T144538C55B2E9C075E5A209F17A3D9A91C9FEBD3826A0D1C7D3111C876EB0192D23938B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_0d26d20f78162595614cbf4bff9ffa04_elex_rhadamanthys_stop

File Explorer

2026-07-30_0d26d20f78162595614cbf4bff9ffa04_elex_rhadamanthys_stop

.exe 61KB

2026-07-30_0d26d20f78162595614cbf4bff9ffa04_elex_rhadamanthys_stop

IMPHASH 9a423a1a41e11c85a6586c49a7e083df
SHA256 1e527b5f9fd9664f417a9e3b932421218c94a13baec654a70d52663f964acea8
MD5 0d26d20f78162595614cbf4bff9ffa04
SHA1 d202ff84db06ff95c9c2ff74ec35fc4c3b7b2912
SHA512 3ba070f925cfb98d5159221fd10246d1ddb06795ef3921a3be6ba897bed0e17a52d37f190aa39de341f0e1b0ca3dd2dc84b9006eb9af12408e6ec9f0a0e928b1
SSDEEP 1536:Zttdse4OcUmWQIvEPZo6E5sEFd29NQgA2w6TNle5:Zdse4OlQZo6EKEFdGM29le5
TLSH
T144538C55B2E9C075E5A209F17A3D9A91C9FEBD3826A0D1C7D3111C876EB0192D23938B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

45894

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

HttpSendRequestW InternetConnectW HttpOpenRequestW InternetSetPerSiteCookieDecisionW InternetOpenUrlW InternetAttemptConnect InternetOpenW InternetReadFile InternetClearAllPerSiteCookieDecisions InternetCloseHandle InternetQueryDataAvailable InternetSetOptionW

shlwapi

StrStrIW PathMatchSpecW PathCombineW wvnsprintfW StrStrIA PathRemoveFileSpecW

kernel32

TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetVersionExA GetSystemTime RtlUnwind WideCharToMultiByte MultiByteToWideChar HeapCreate CopyFileW CreateThread WaitForMultipleObjects GetTickCount DeleteFileW CreateProcessW SetUnhandledExceptionFilter ExitProcess GetLastError LoadLibraryW GetProcAddress Sleep VirtualProtect GetPrivateProfileIntW ExpandEnvironmentStringsW GetPrivateProfileStringW SetFilePointer SetEndOfFile GetVersionExW HeapAlloc SetWaitableTimer SystemTimeToFileTime CreateWaitableTimerW FindNextFileW HeapFree ReadFile GetModuleFileNameW GetFileTime WaitForSingleObject GetTimeZoneInformation CreateFileW CloseHandle GetFileSizeEx VirtualFree GetProcessHeap GetCurrentDirectoryW VirtualAlloc VirtualQuery HeapReAlloc GetFileSize FindClose WriteFile GetLocalTime FindFirstFileW GetModuleHandleW GetCommandLineW

user32

GetWindowLongW DispatchMessageW GetForegroundWindow CharLowerW CreateWindowExW FindWindowW PeekMessageW SetForegroundWindow GetSystemMetrics MessageBoxW SetWindowPos SetWindowLongW SetParent

advapi32

RegOpenKeyExW RegEnumKeyExW RegQueryValueExW RegSetValueExW RegCreateKeyExW RegCloseKey

shell32

SHGetFolderPathW

ole32

CoCreateInstance OleInitialize CoInitialize

oleaut32

SysFreeString VariantInit SysAllocString VariantClear

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_0d26d20f78162595614cbf4bff9ffa04_elex_rhadamanthys_stop

wininet

shlwapi

kernel32

user32

advapi32

shell32

ole32

oleaut32

generic