Analysis
- max time kernel
149s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
01/08/2026, 02:49
General
- Target 2026-08-01_a994995ee774630224d49de9c95ff447_elex_rhadamanthys_stealc_stop_tofsee.exe
- Size 1.1MB
- Sample260801-dbah8awdkd
- SHA256 676144df40617699edb173c6e3cb0eadff0ad6e9cff43bba47970280deb151a6
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-01_a994995ee774630224d49de9c95ff447_elex_rhadamanthys_stealc_stop_tofsee.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-01_a994995ee774630224d49de9c95ff447_elex_rhadamanthys_stealc_stop_tofsee.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5904-7-0x00000000756E0000-0x00000000757D0000-memory.dmp
memory/5904-6-0x00000000756FC000-0x00000000756FD000-memory.dmp
memory/5904-8-0x00000000756E0000-0x00000000757D0000-memory.dmp
memory/5904-11-0x00000000756E0000-0x00000000757D0000-memory.dmp
memory/5904-10-0x00000000756E0000-0x00000000757D0000-memory.dmp
memory/5904-12-0x00000000756E0000-0x00000000757D0000-memory.dmp
memory/5904-9-0x00000000756E0000-0x00000000757D0000-memory.dmp
memory/5904-14-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-48-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-46-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-54-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-138-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-140-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-137-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-134-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-131-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-126-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-132-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-124-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-116-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-105-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-100-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-78-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-74-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-62-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-58-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-56-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-123-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-121-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-118-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-114-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-113-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-111-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-108-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-106-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-102-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-98-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-94-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-97-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-93-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-90-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-89-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-86-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-85-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-83-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-80-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-76-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-72-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-71-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-69-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-66-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-64-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-60-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-50-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-42-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-40-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-38-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-30-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-28-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-26-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-24-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-22-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-20-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-52-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-44-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-36-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-35-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-32-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-13-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-19-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-16-0x0000000000B80000-0x0000000000C6A000-memory.dmp
memory/5904-2285-0x00000000756E0000-0x00000000757D0000-memory.dmp
memory/5904-2286-0x00000000756E0000-0x00000000757D0000-memory.dmp
memory/5904-2287-0x00000000756E0000-0x00000000757D0000-memory.dmp
memory/5904-2288-0x00000000756E0000-0x00000000757D0000-memory.dmp
memory/5904-2289-0x00000000756E0000-0x00000000757D0000-memory.dmp
memory/5904-2290-0x00000000756E0000-0x00000000757D0000-memory.dmp
memory/5904-2291-0x00000000756E0000-0x00000000757D0000-memory.dmp
memory/5904-2292-0x00000000756E0000-0x00000000757D0000-memory.dmp