2026-08-03_da9c39961ea85e8e97905f87907d9d73_elex_rhadamanthys_stop

General

Target
2026-08-03_da9c39961ea85e8e97905f87907d9d73_elex_rhadamanthys_stop
Size 288KB
Sample260804-lc9cyastf1
SHA256 e28aa890f15b786b0bff80abb6a2a64b2ba8a8e64619269c353635bd4149ffd9
MD5 da9c39961ea85e8e97905f87907d9d73
SHA1 1271a65b81f836dfe6c9c7c1b4e9b7159e15aa8d
SHA512 e33735bba7f5a27e6d3eb8410e2910fec5d9349d6144a4a227fb92785bdceea75ed2936da91ee14a20c1c0da41337593206a02d3ed7caa7608e624bd7063b021
SSDEEP 3072:LjOVCuTyE08/Gg5QH00uU+ZnOtNpbutVLSq2yFIYPlZsFONI0qLtRH:LjOVLTylq3uH0zUCnOtNpbutgq2yaYv
TLSH
T1D7546B017791C073C55264B00A26C7B69EBEA431677991C7B7CA0B7D9F746C0EA3A34E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_da9c39961ea85e8e97905f87907d9d73_elex_rhadamanthys_stop

File Explorer

2026-08-03_da9c39961ea85e8e97905f87907d9d73_elex_rhadamanthys_stop

.exe 288KB

2026-08-03_da9c39961ea85e8e97905f87907d9d73_elex_rhadamanthys_stop

IMPHASH 898b5fd55ed2fa75c28d7d5c4a5ad13c
SHA256 e28aa890f15b786b0bff80abb6a2a64b2ba8a8e64619269c353635bd4149ffd9
MD5 da9c39961ea85e8e97905f87907d9d73
SHA1 1271a65b81f836dfe6c9c7c1b4e9b7159e15aa8d
SHA512 e33735bba7f5a27e6d3eb8410e2910fec5d9349d6144a4a227fb92785bdceea75ed2936da91ee14a20c1c0da41337593206a02d3ed7caa7608e624bd7063b021
SSDEEP 3072:LjOVCuTyE08/Gg5QH00uU+ZnOtNpbutVLSq2yFIYPlZsFONI0qLtRH:LjOVLTylq3uH0zUCnOtNpbutgq2yaYv
TLSH
T1D7546B017791C073C55264B00A26C7B69EBEA431677991C7B7CA0B7D9F746C0EA3A34E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

299008

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cygwin\home\adid\src\wd\wd.1021\samples\wdreg\WIN32\wdreg.pdb

kernel32

lstrlenA CloseHandle ReadFile GetFileSize CreateFileA DeleteFileA GetWindowsDirectoryA DeviceIoControl WaitForSingleObject LocalAlloc SetEvent CreateMutexA ReleaseMutex GetSystemInfo GetVersionExA GetCurrentProcess GetModuleHandleA Sleep LoadLibraryExA GetProcAddress FreeLibrary GetLastError FormatMessageA LocalFree CreateEventA GetFullPathNameA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree HeapAlloc RtlUnwind ExitThread CreateThread EnterCriticalSection LeaveCriticalSection GetCommandLineA HeapDestroy HeapCreate VirtualFree DeleteCriticalSection FatalAppExitA VirtualAlloc HeapReAlloc OutputDebugStringA ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetCurrentThread GetCPInfo GetACP GetOEMCP LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW HeapSize SetHandleCount GetFileType GetStartupInfoA GetFileAttributesA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW InitializeCriticalSection GetModuleHandleW SetFilePointer GetConsoleCP GetConsoleMode GetTimeZoneInformation SetConsoleCtrlHandler InterlockedExchange LoadLibraryA RaiseException GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage VirtualProtect VirtualQuery FlushFileBuffers GetExitCodeProcess CreateProcessA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringA CompareStringW SetEnvironmentVariableA SetEndOfFile GetProcessHeap GetLocaleInfoW ReadConsoleInputA SetConsoleMode PeekConsoleInputA GetNumberOfConsoleInputEvents

advapi32

DeleteService ControlService OpenServiceA CreateServiceA OpenSCManagerA CloseServiceHandle StartServiceA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_da9c39961ea85e8e97905f87907d9d73_elex_rhadamanthys_stop

kernel32

advapi32

generic