2026-08-07_43dadcaa81d6ac4ea37b416ccdc6ed53_elex_karagany_rhadamanthys_stop

General

Target
2026-08-07_43dadcaa81d6ac4ea37b416ccdc6ed53_elex_karagany_rhadamanthys_stop
Size 57KB
Sample260807-marksasfmf
SHA256 e75d772de6405059c52951915d9b9d4770692676cf4ed828e577a636c1767ca3
MD5 43dadcaa81d6ac4ea37b416ccdc6ed53
SHA1 36ed175c3fa0435acae8ab1696e49d0f8b5a8df2
SHA512 64f5f4999e72a322e411177dd1f8e0b789867510097d12d2ac98fa577882987f3d14e304eb26474d8c122c8927f630eecfe0edcf98569dcec230269eaca385d0
SSDEEP 768:2Pkdn15xAIpDCEBTQQuVDuTbYbREe1GtDDwXNKTW0uk20KNsB+iThq3:31Tp3BcNh2Q6B+T
TLSH
T152432A137AE1C072D8B702B059B5C7128A7F7D628BB4C6577BD8068D6E712D06E393A3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_43dadcaa81d6ac4ea37b416ccdc6ed53_elex_karagany_rhadamanthys_stop

File Explorer

2026-08-07_43dadcaa81d6ac4ea37b416ccdc6ed53_elex_karagany_rhadamanthys_stop

.exe 57KB

2026-08-07_43dadcaa81d6ac4ea37b416ccdc6ed53_elex_karagany_rhadamanthys_stop

IMPHASH a340e1f20854ade539b60f8d4d7110eb
SHA256 e75d772de6405059c52951915d9b9d4770692676cf4ed828e577a636c1767ca3
MD5 43dadcaa81d6ac4ea37b416ccdc6ed53
SHA1 36ed175c3fa0435acae8ab1696e49d0f8b5a8df2
SHA512 64f5f4999e72a322e411177dd1f8e0b789867510097d12d2ac98fa577882987f3d14e304eb26474d8c122c8927f630eecfe0edcf98569dcec230269eaca385d0
SSDEEP 768:2Pkdn15xAIpDCEBTQQuVDuTbYbREe1GtDDwXNKTW0uk20KNsB+iThq3:31Tp3BcNh2Q6B+T
TLSH
T152432A137AE1C072D8B702B059B5C7128A7F7D628BB4C6577BD8068D6E712D06E393A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5871

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Temp\CreateRtkToastLnk - Copy - Copy\Release\CreateRtkToastLnk.pdb

shlwapi

SHStrDupW

kernel32

InitOnceExecuteOnce CreateFileW GetEnvironmentVariableW GetFileAttributesW CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineW UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetStartupInfoW GetModuleHandleW GetProcAddress EncodePointer DecodePointer GetLastError SetLastError InterlockedIncrement InterlockedDecrement GetCurrentThreadId ExitProcess GetModuleHandleExW MultiByteToWideChar GetStdHandle WriteFile GetModuleFileNameW GetProcessHeap GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection RaiseException QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW EnterCriticalSection LeaveCriticalSection HeapFree Sleep IsValidCodePage GetACP GetOEMCP GetCPInfo LoadLibraryExW OutputDebugStringW LoadLibraryW RtlUnwind HeapAlloc HeapReAlloc WideCharToMultiByte GetStringTypeW HeapSize LCMapStringEx FlushFileBuffers GetConsoleCP

ole32

PropVariantClear CoCreateInstance CoInitialize CoUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-07_43dadcaa81d6ac4ea37b416ccdc6ed53_elex_karagany_rhadamanthys_stop

shlwapi

kernel32

ole32

generic