General
- Target 2026-08-08_15096269daec81dac977a38a2249b438_elex_rhadamanthys_stop
- Size 992KB
- Sample260808-ent9tsszhy
- SHA256 cf4c61486688ea7da57c259a1844f2a71c6c2a659ec87a716b992e0c6704d740
- MD5 15096269daec81dac977a38a2249b438
- SHA1 b1d313817b151e04f8d9c09a2d8e4b1da2504d1c
- SHA512 c26a98dcb680d808c998acf997de152a62bdac09e770e787b603abaea7aa3387917eceae81be6171614d06ad83227a531c21b210b1e729d62850484cc94496e7
- SSDEEP 12288:Na0wIk0BX3RK0emGd70ioGuVWW6oIERmBZikAROs6r5s92XlIUBiKQpriOY3Ttaz:Na1Dd70iTWCE8ikAROpP7yrOTtoPRd
- TLSH T11525E00137C08035F1B329768ABFD728556DB8715FA886CFA388176E4D706E1EA3172B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_15096269daec81dac977a38a2249b438_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_15096269daec81dac977a38a2249b438_elex_rhadamanthys_stop
- Size 992KB
- SHA256 cf4c61486688ea7da57c259a1844f2a71c6c2a659ec87a716b992e0c6704d740
- MD5 15096269daec81dac977a38a2249b438
- SHA1 b1d313817b151e04f8d9c09a2d8e4b1da2504d1c
- SHA512 c26a98dcb680d808c998acf997de152a62bdac09e770e787b603abaea7aa3387917eceae81be6171614d06ad83227a531c21b210b1e729d62850484cc94496e7
- SSDEEP 12288:Na0wIk0BX3RK0emGd70ioGuVWW6oIERmBZikAROs6r5s92XlIUBiKQpriOY3Ttaz:Na1Dd70iTWCE8ikAROpP7yrOTtoPRd
- TLSH T11525E00137C08035F1B329768ABFD728556DB8715FA886CFA388176E4D706E1EA3172B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1