2026-08-06_450cb2278cbf088866ff107320d4c161_elex_maze_rhadamanthys_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-06_450cb2278cbf088866ff107320d4c161_elex_maze_rhadamanthys_stop
Size 247KB
Sample260807-a7teesvbne
SHA256 fe8e526ece77caf9abe0fcd0dfd2b157911af929a70393b7978abeb75ff18de4
MD5 450cb2278cbf088866ff107320d4c161
SHA1 5c46ee93ae77a86203ef19782c20a590c63ce069
SHA512 3ff3bc37945abeba32d7e227a38d803e2052fc6e7e5d2b1cc7dc5689e328c07afafe6226ce3566f1ec357084fa66a54e806468404c9933dbc263413880adb72f
SSDEEP 6144:HXPHpf/UkaA6qiyDp/QG3KQsH+gv+MbJs+Qss1Dl7:H/HslqiyDp/QiKdxyCs1D
TLSH
T1C1348D2235908476D26342338DF4B76952BEBE620F3192D777D80B1D9EB09C1BA36763
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-08-06_450cb2278cbf088866ff107320d4c161_elex_maze_rhadamanthys_stop

.exe 247KB

2026-08-06_450cb2278cbf088866ff107320d4c161_elex_maze_rhadamanthys_stop

IMPHASH 85541e7207740890f4982062db8e8f3d
SHA256 fe8e526ece77caf9abe0fcd0dfd2b157911af929a70393b7978abeb75ff18de4
MD5 450cb2278cbf088866ff107320d4c161
SHA1 5c46ee93ae77a86203ef19782c20a590c63ce069
SHA512 3ff3bc37945abeba32d7e227a38d803e2052fc6e7e5d2b1cc7dc5689e328c07afafe6226ce3566f1ec357084fa66a54e806468404c9933dbc263413880adb72f
SSDEEP 6144:HXPHpf/UkaA6qiyDp/QG3KQsH+gv+MbJs+Qss1Dl7:H/HslqiyDp/QiKdxyCs1D
TLSH
T1C1348D2235908476D26342338DF4B76952BEBE620F3192D777D80B1D9EB09C1BA36763
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

ab:80:61:06:26:2d:ca:e8:8e:94:fd:44:0e:d1:cb:c7:11:e0:2d:3c:07:db:c7:f9:38:63:44:66:28:d3:e4:74

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Panda Security S.L.,O=Panda Security S.L.,L=Bilbao,C=ES

Chains

Jul 8, 2026

CN=Panda Security S.L.,O=Panda Security S.L.,L=Bilbao,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Panda Security S.L.,O=Panda Security S.L.,L=Bilbao,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Panda Security S.L.,O=Panda Security S.L.,L=Bilbao,C=ES

Serial Number

01:44:e5:1c:11:d9:c2:9d:6c:f7:65:c5:89:27:19:ad

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 11, 2024 - Nov 14, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

28235

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Builds\100\Aether\AetherAgent-1.25.12\bin\CmdLauncher.pdb

kernel32

LoadLibraryExW SetLastError GetCurrentProcess SetDllDirectoryW GetStdHandle CreateProcessW GetExitCodeProcess GetStringTypeW GetFileAttributesExW GetCurrentThreadId EncodePointer EnterCriticalSection LeaveCriticalSection GetSystemTimeAsFileTime IsDebuggerPresent OutputDebugStringW WriteConsoleW SetStdHandle WriteFile CopyFileW WaitForSingleObject CloseHandle CreateFileW FreeLibrary GetProcAddress LoadLibraryW LocalAlloc GetModuleHandleW GetModuleFileNameW LocalFree GetACP DecodePointer DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetLastError RaiseException WideCharToMultiByte MultiByteToWideChar SetFilePointerEx GetConsoleMode GetConsoleCP UnregisterWaitEx QueryDepthSList InterlockedFlushSList InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead ReleaseSemaphore DuplicateHandle HeapFree GetCommandLineW RtlUnwind HeapAlloc GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter CreateEventW Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetTickCount CreateSemaphoreW CreateTimerQueue SetEvent WaitForSingleObjectEx SignalObjectAndWait SwitchToThread CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait IsProcessorFeaturePresent LCMapStringW GetProcessHeap ExitProcess GetModuleHandleExW HeapSize GetCurrentThread IsValidCodePage GetOEMCP GetFileType QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc GetThreadTimes FreeLibraryAndExitThread GetModuleHandleA GetVersionExW VirtualAlloc VirtualFree VirtualProtect FlushFileBuffers

advapi32

RegQueryValueExW RegCloseKey UnregisterTraceGuids RegisterTraceGuidsW GetTraceEnableFlags GetTraceEnableLevel GetTraceLoggerHandle TraceEvent RegOpenKeyExW

shell32

ord165

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-06_450cb2278cbf088866ff107320d4c161_elex_maze_rhadamanthys_stop

kernel32

advapi32

shell32

generic