General
- Target 2026-08-06_3ddcc038e2804d01e4c141f99ade2c9a_elex_rhadamanthys_stop
- Size 992KB
- Sample260806-b4jaqa1cnh
- SHA256 41e9fe3de714125b0bc1b98ffa8082896518cfe4ce5f69e85330064c8742c775
- MD5 3ddcc038e2804d01e4c141f99ade2c9a
- SHA1 004d535c692716f04757ba32a8a5aef14739c3e3
- SHA512 fe4a1fd5141528b588734897b775e4bf4a30e2587859d7b6de920da6118686f95d12cba30249d4180eb03a5eda008cb40f90d9223c2b455928a9b3fb0bba6848
- SSDEEP 24576:c81Dd70iTWCtI8cbWhVS6QFQmM7OlgcVP576z:/Dd79WCiBAE3MHcVha
- TLSH T16625E01073908136F0A329768BBFD725506DB8725F6986CFA3C8076D5D70AE1EA34B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_3ddcc038e2804d01e4c141f99ade2c9a_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_3ddcc038e2804d01e4c141f99ade2c9a_elex_rhadamanthys_stop
- Size 992KB
- SHA256 41e9fe3de714125b0bc1b98ffa8082896518cfe4ce5f69e85330064c8742c775
- MD5 3ddcc038e2804d01e4c141f99ade2c9a
- SHA1 004d535c692716f04757ba32a8a5aef14739c3e3
- SHA512 fe4a1fd5141528b588734897b775e4bf4a30e2587859d7b6de920da6118686f95d12cba30249d4180eb03a5eda008cb40f90d9223c2b455928a9b3fb0bba6848
- SSDEEP 24576:c81Dd70iTWCtI8cbWhVS6QFQmM7OlgcVP576z:/Dd79WCiBAE3MHcVha
- TLSH T16625E01073908136F0A329768BBFD725506DB8725F6986CFA3C8076D5D70AE1EA34B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1