2026-08-08_30289604ccf6ff2d1dc533ba2910e567_elex_floxif_rhadamanthys_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_30289604ccf6ff2d1dc533ba2910e567_elex_floxif_rhadamanthys_stop
Size 179KB
Sample260808-ee672azcpc
SHA256 17eb12bf35a3cf79f2009a97879f2b74cb1ddf3250255a577773367eb61c5a12
MD5 30289604ccf6ff2d1dc533ba2910e567
SHA1 a76cb8bcb61995d596aeb1a49bf5ad0ee064957c
SHA512 60b36d497aa9e9ee3a53095034fedb55288dff892ea2634dab4413bc1cabbe113b5d8b3b458063ad6946a7713c7aaf688df0465813f8e31ccf0d3db1395783a4
SSDEEP 3072:JqfA/4ablqp6OmwVssh3KwCffcgY14uMVkzcwB4BtQ46CpfSC2lQBV+UdE+rECWQ:kk4Ilqp6OmwVdvZSNBV+UdvrEFp7hKwu
TLSH
T132049E0232D1C3F5E4B22A31387856711AFABA7D183BC94B7742144D4F6DA428E7AB67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-08_30289604ccf6ff2d1dc533ba2910e567_elex_floxif_rhadamanthys_stop

File Explorer

2026-08-08_30289604ccf6ff2d1dc533ba2910e567_elex_floxif_rhadamanthys_stop

.exe 179KB

2026-08-08_30289604ccf6ff2d1dc533ba2910e567_elex_floxif_rhadamanthys_stop

IMPHASH f243cd70bde696c9440796c911632a9f
SHA256 17eb12bf35a3cf79f2009a97879f2b74cb1ddf3250255a577773367eb61c5a12
MD5 30289604ccf6ff2d1dc533ba2910e567
SHA1 a76cb8bcb61995d596aeb1a49bf5ad0ee064957c
SHA512 60b36d497aa9e9ee3a53095034fedb55288dff892ea2634dab4413bc1cabbe113b5d8b3b458063ad6946a7713c7aaf688df0465813f8e31ccf0d3db1395783a4
SSDEEP 3072:JqfA/4ablqp6OmwVssh3KwCffcgY14uMVkzcwB4BtQ46CpfSC2lQBV+UdE+rECWQ:kk4Ilqp6OmwVdvZSNBV+UdvrEFp7hKwu
TLSH
T132049E0232D1C3F5E4B22A31387856711AFABA7D183BC94B7742144D4F6DA428E7AB67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

58:2d:77:88:89:20:63:06:80:22:28:e2:98:25:cf:29:fe:9f:ad:31:3d:dd:ed:fc:a0:bd:48:dd:1e:96:94:9e

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL

Chains

Feb 20, 2025

CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL

Serial Number

6a:f8:97:e1:32:47:59:5d:26:ab:6d:cd:79:41:05:44

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 10, 2024 - May 10, 2025

Subject

CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL

Serial Number

9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 9, 2025 - Jan 7, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 31, 2021 - Sep 17, 2029

Minor OS version

Major OS version

Entry point

36575

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathCombineA PathRemoveFileSpecW PathRemoveFileSpecA

kernel32

SetUnhandledExceptionFilter FlushFileBuffers WriteFile FileTimeToLocalFileTime SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetLocaleInfoW ExitProcess HeapAlloc GetProcessHeap HeapFree GetModuleFileNameA WritePrivateProfileStringA WideCharToMultiByte MultiByteToWideChar GetPrivateProfileStringA WriteConsoleW GetConsoleCP SetConsoleTextAttribute WriteConsoleOutputW Sleep ReadConsoleInputW PeekConsoleInputW SetConsoleCursorPosition GetStdHandle FreeLibrary CloseHandle GetTickCount DeleteFileA GetLastError GetFullPathNameW CreateFileW GetCommandLineW GetProcAddress LoadLibraryA GetModuleHandleW GetConsoleScreenBufferInfo GetConsoleMode CreateFileA HeapSize GetConsoleOutputCP WriteConsoleA SetStdHandle RtlUnwind HeapReAlloc VirtualAlloc InitializeCriticalSection GetCommandLineA GetVersionExA TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId LCMapStringA LCMapStringW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer EnterCriticalSection LeaveCriticalSection GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

PeekMessageW GetMessageW TranslateMessage DispatchMessageW CreateWindowExW FindWindowW DefWindowProcW PostQuitMessage SendMessageW wsprintfW RegisterClassExW GetClassInfoExW WaitMessage

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_30289604ccf6ff2d1dc533ba2910e567_elex_floxif_rhadamanthys_stop

PE Signature issue

shlwapi

kernel32

user32

generic