2026-08-03_8abeab08596abc96672bbc752d6e2269_elex_rhadamanthys_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_8abeab08596abc96672bbc752d6e2269_elex_rhadamanthys_stop
Size 102KB
Sample260804-m13qqstybv
SHA256 196722f492921aa562063fdd79d4b856489bd3f69bd886607a086a1ca22f9158
MD5 8abeab08596abc96672bbc752d6e2269
SHA1 02acfe924e14401d66d861acf654a8021d50970f
SHA512 bbee9ba13fbd1f6c2cf00b9a9d9ee614b0e2d586b9bbce3a7503e169890ea427a43e4c43f6d0db47ba9bd1bfa2b263c6bc19433b2591ee322e7f419169ba89c3
SSDEEP 1536:+kU92//pFxiQE2kv3VU+oF7G0Ktb7snFWAsnF7x:+pg/5bDF7Gntb7snJsn/
TLSH
T183A39E123843D072E44508B691DCCBA29F7FAC433BB64467FB69024B9B523D457AA3BD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-08-03_8abeab08596abc96672bbc752d6e2269_elex_rhadamanthys_stop

.exe 102KB

2026-08-03_8abeab08596abc96672bbc752d6e2269_elex_rhadamanthys_stop

IMPHASH 46937d478c9e39d70e118e173a6bebef
SHA256 196722f492921aa562063fdd79d4b856489bd3f69bd886607a086a1ca22f9158
MD5 8abeab08596abc96672bbc752d6e2269
SHA1 02acfe924e14401d66d861acf654a8021d50970f
SHA512 bbee9ba13fbd1f6c2cf00b9a9d9ee614b0e2d586b9bbce3a7503e169890ea427a43e4c43f6d0db47ba9bd1bfa2b263c6bc19433b2591ee322e7f419169ba89c3
SSDEEP 1536:+kU92//pFxiQE2kv3VU+oF7G0Ktb7snFWAsnF7x:+pg/5bDF7Gntb7snJsn/
TLSH
T183A39E123843D072E44508B691DCCBA29F7FAC433BB64467FB69024B9B523D457AA3BD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

f4:90:92:9b:82:b0:56:c7:65:32:3d:09:63:81:2e:85:94:f3:06:2c:41:0f:50:3a:cf:c8:3c:bf:67:40:2a:fe

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=SC331902,CN=SimpleHelp Ltd,O=SimpleHelp Ltd,ST=Midlothian,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130853636f746c616e64,1.3.6.1.4.1.311.60.2.1.3=#13024742

Chains

Jul 15, 2026

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Digest

11:b6:b0:a7:a3:64:7d:b6:b9:fe:44:71:77:47:b2:08:4f:11:5d:f2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

Jul 15, 2026

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Subject

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

76:53:fe:b9:3d:d9:e7:e9:26:32:ac:d6:0a:be:ac:38

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2020 - Mar 18, 2045

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

4b:2c:3b:01:01:8b:ad:2a:bc:8c:7b:5b:3e:ed:90:57

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 22, 2021 - Mar 21, 2046

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Serial Number

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Globalsign R45 TSA for Authenticode 202510,O=GlobalSign nv-sa,C=BE

Serial Number

84:72:3f:b8:30:0d:fb:a8:75:b3:3b:57:cc:26:37:82

Issuer

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 15, 2025 - Jan 10, 2037

Subject

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Serial Number

83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 16, 2025 - Jul 16, 2041

Subject

Serial Number

88:df:10:3c:59:00:2f:69:0f:44:29:d9:10:54:87:8b

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 15, 2024 - Mar 15, 2027

Minor OS version

Major OS version

Entry point

14133

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TerminateProcess GetStdHandle GetExitCodeProcess CreateThread CreateProcessA SetHandleInformation CreatePipe GetVersion CloseHandle ReadFile Sleep CompareStringW CompareStringA CreateFileA HeapSize GetLastError FormatMessageA LocalFree WaitForSingleObject ExitProcess GetLocaleInfoA EnterCriticalSection LeaveCriticalSection MultiByteToWideChar HeapAlloc GetProcAddress GetModuleHandleA HeapFree GetCommandLineA GetVersionExA GetProcessHeap WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection SetHandleCount GetFileType GetStartupInfoA GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree VirtualAlloc HeapReAlloc HeapDestroy HeapCreate GetModuleFileNameA LoadLibraryA InitializeCriticalSection GetFileAttributesA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetEnvironmentVariableA

user32

SendInput SystemParametersInfoA RedrawWindow MessageBoxA SetCursorPos GetCursorInfo

advapi32

AllocateAndInitializeSid CheckTokenMembership FreeSid CreateProcessWithLogonW

shell32

SHFileOperationA ShellExecuteExA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_8abeab08596abc96672bbc752d6e2269_elex_rhadamanthys_stop

kernel32

user32

advapi32

shell32

generic