General
- Target 2026-08-03_a1e386b3b1f8a4e6e10767b196cbd555_elex_rhadamanthys_stop
- Size 992KB
- Sample260804-mh39jscp7v
- SHA256 00d8dacad55175806a723667a97dcf5edfc6c58cac63e7dd563f5ad9d35fdc08
- MD5 a1e386b3b1f8a4e6e10767b196cbd555
- SHA1 8c222278c4de099c7987f8e1f740f7ec39cdc255
- SHA512 210fc565e36e073074ba80d93dbce77bd3e4681e7188fcb86f6caf16996625d4dc7ebd7c8e51bb605dfc1c7864b732960b7827e7a18d7b7ac3dc9e678d8d9953
- SSDEEP 24576:Gb1Dd70iTWCzT7Jckdwi6i9bNrqq4E41WFpW3oRos:8Dd79WCP7Jckdwi3N7+WTW3
- TLSH T15C25E01077D08136F1B329328B7FE724A56C79615F6886CFA3C8166D5D706E0EA31B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a1e386b3b1f8a4e6e10767b196cbd555_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a1e386b3b1f8a4e6e10767b196cbd555_elex_rhadamanthys_stop
- Size 992KB
- SHA256 00d8dacad55175806a723667a97dcf5edfc6c58cac63e7dd563f5ad9d35fdc08
- MD5 a1e386b3b1f8a4e6e10767b196cbd555
- SHA1 8c222278c4de099c7987f8e1f740f7ec39cdc255
- SHA512 210fc565e36e073074ba80d93dbce77bd3e4681e7188fcb86f6caf16996625d4dc7ebd7c8e51bb605dfc1c7864b732960b7827e7a18d7b7ac3dc9e678d8d9953
- SSDEEP 24576:Gb1Dd70iTWCzT7Jckdwi6i9bNrqq4E41WFpW3oRos:8Dd79WCP7Jckdwi3N7+WTW3
- TLSH T15C25E01077D08136F1B329328B7FE724A56C79615F6886CFA3C8166D5D706E0EA31B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1