General
- Target 2026-08-03_f5ab800c01524712c0494237ea6cb20e_elex_rhadamanthys_stop
- Size 992KB
- Sample260804-kvxles1yes
- SHA256 243ee22e5a93edb0dfd99faac7d6bbef957b3175dd5496d60dd6160b036e3b4e
- MD5 f5ab800c01524712c0494237ea6cb20e
- SHA1 d8b680b39c4252e3421ab24654c11e014f601dfa
- SHA512 f8d5c7dfa04289fd1eba2b2f7c401b7f353e928e0a9111ab34cf42ad9d318859aae5d1bcc1feb58fa630409ec4c4e96e9b7a1905ee6cae162ed005735a099a80
- SSDEEP 12288:Ks0wIk0BX3RK0emGd70ioGuVWW6oIGDOotBjbVIL7SL3iKyrBn1cxJNTOwPL2tOz:Ks1Dd70iTWCyZvbzuKencnTgVoAM
- TLSH T1F225E1113790C139F1B319768ABFE724542DB8615F6886CFA3C8167E5E706E0EA3172B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_f5ab800c01524712c0494237ea6cb20e_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_f5ab800c01524712c0494237ea6cb20e_elex_rhadamanthys_stop
- Size 992KB
- SHA256 243ee22e5a93edb0dfd99faac7d6bbef957b3175dd5496d60dd6160b036e3b4e
- MD5 f5ab800c01524712c0494237ea6cb20e
- SHA1 d8b680b39c4252e3421ab24654c11e014f601dfa
- SHA512 f8d5c7dfa04289fd1eba2b2f7c401b7f353e928e0a9111ab34cf42ad9d318859aae5d1bcc1feb58fa630409ec4c4e96e9b7a1905ee6cae162ed005735a099a80
- SSDEEP 12288:Ks0wIk0BX3RK0emGd70ioGuVWW6oIGDOotBjbVIL7SL3iKyrBn1cxJNTOwPL2tOz:Ks1Dd70iTWCyZvbzuKencnTgVoAM
- TLSH T1F225E1113790C139F1B319768ABFE724542DB8615F6886CFA3C8167E5E706E0EA3172B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1