2026-08-08_1dc27759df0cf71f7c271b5344989a2d_elex_karagany_rhadamanthys_stop

General

Target
2026-08-08_1dc27759df0cf71f7c271b5344989a2d_elex_karagany_rhadamanthys_stop
Size 625KB
Sample260808-p2cxta1wd1
SHA256 2c1040310ec63c55ed238e2cf02788c6f2f2cbb5cfd2e1311040abacba9164d5
MD5 1dc27759df0cf71f7c271b5344989a2d
SHA1 d1a3ebfe5690765570b1d0eff0275911c9fd1397
SHA512 c3f843908ed34e017b74a1262faf7bf655179f0d294cb24c1562164abc1c10c86d7709833df062add948c4c402635a507c7622db83666c6fc7e2d03b87cf7271
SSDEEP 12288:eMeURysbmneYzYEQFIHlUEe9UFZaD4WG7/DAtGaKxWYa:NRyKmhzYZIHlFLaDhODAcadY
TLSH
T1B2D42306359195B2CDAB02F040A0E321A52FBCA29E7495963FDD36EFB5B24C15D1933F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_1dc27759df0cf71f7c271b5344989a2d_elex_karagany_rhadamanthys_stop

File Explorer

2026-08-08_1dc27759df0cf71f7c271b5344989a2d_elex_karagany_rhadamanthys_stop

.exe 625KB

2026-08-08_1dc27759df0cf71f7c271b5344989a2d_elex_karagany_rhadamanthys_stop

IMPHASH a340e1f20854ade539b60f8d4d7110eb
SHA256 2c1040310ec63c55ed238e2cf02788c6f2f2cbb5cfd2e1311040abacba9164d5
MD5 1dc27759df0cf71f7c271b5344989a2d
SHA1 d1a3ebfe5690765570b1d0eff0275911c9fd1397
SHA512 c3f843908ed34e017b74a1262faf7bf655179f0d294cb24c1562164abc1c10c86d7709833df062add948c4c402635a507c7622db83666c6fc7e2d03b87cf7271
SSDEEP 12288:eMeURysbmneYzYEQFIHlUEe9UFZaD4WG7/DAtGaKxWYa:NRyKmhzYZIHlFLaDhODAcadY
TLSH
T1B2D42306359195B2CDAB02F040A0E321A52FBCA29E7495963FDD36EFB5B24C15D1933F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5871

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Temp\CreateRtkToastLnk - Copy - Copy\Release\CreateRtkToastLnk.pdb

shlwapi

SHStrDupW

kernel32

InitOnceExecuteOnce CreateFileW GetEnvironmentVariableW GetFileAttributesW CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineW UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetStartupInfoW GetModuleHandleW GetProcAddress EncodePointer DecodePointer GetLastError SetLastError InterlockedIncrement InterlockedDecrement GetCurrentThreadId ExitProcess GetModuleHandleExW MultiByteToWideChar GetStdHandle WriteFile GetModuleFileNameW GetProcessHeap GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection RaiseException QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW EnterCriticalSection LeaveCriticalSection HeapFree Sleep IsValidCodePage GetACP GetOEMCP GetCPInfo LoadLibraryExW OutputDebugStringW LoadLibraryW RtlUnwind HeapAlloc HeapReAlloc WideCharToMultiByte GetStringTypeW HeapSize LCMapStringEx FlushFileBuffers GetConsoleCP

ole32

PropVariantClear CoCreateInstance CoInitialize CoUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_1dc27759df0cf71f7c271b5344989a2d_elex_karagany_rhadamanthys_stop

shlwapi

kernel32

ole32

generic