General
- Target 2026-07-31_19c781e9a24f6375ad0876f588386927_elex_rhadamanthys_stop
- Size 996KB
- Sample260731-d1cd4svxd1
- SHA256 b2e8a39fc77214cddc6ec87f8004de825336f10f4c199e499c61d690dfab4452
- MD5 19c781e9a24f6375ad0876f588386927
- SHA1 a407fa6039bcd367360029d0560bd09cdf6049a2
- SHA512 a07f3ea4613fac2f567838e2b92c40f721653e850ccaf93f3fed64aa36e60e952c94e0280963bc40d2fe2d5c278fca69b0d134acd84cc8d76a6e7f527d777fd4
- SSDEEP 24576:261Dd70iTWCqrAKPtvkw3qjQhKxSdJexJCoNOmvmw:3Dd79WCSnPtv1MQ4A7e/CCmw
- TLSH T12F25E01137908036F1B319368B7FE734542DB8715F6986CFA388167E5EB0AE1AA3171B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_19c781e9a24f6375ad0876f588386927_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_19c781e9a24f6375ad0876f588386927_elex_rhadamanthys_stop
- Size 996KB
- SHA256 b2e8a39fc77214cddc6ec87f8004de825336f10f4c199e499c61d690dfab4452
- MD5 19c781e9a24f6375ad0876f588386927
- SHA1 a407fa6039bcd367360029d0560bd09cdf6049a2
- SHA512 a07f3ea4613fac2f567838e2b92c40f721653e850ccaf93f3fed64aa36e60e952c94e0280963bc40d2fe2d5c278fca69b0d134acd84cc8d76a6e7f527d777fd4
- SSDEEP 24576:261Dd70iTWCqrAKPtvkw3qjQhKxSdJexJCoNOmvmw:3Dd79WCSnPtv1MQ4A7e/CCmw
- TLSH T12F25E01137908036F1B319368B7FE734542DB8715F6986CFA388167E5EB0AE1AA3171B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1