2026-08-08_b1f54daf6ab8e83cbeb0e3a34ec2ea1a_elex_rhadamanthys_stop

General

Target
2026-08-08_b1f54daf6ab8e83cbeb0e3a34ec2ea1a_elex_rhadamanthys_stop
Size 242KB
Sample260808-rmcdvasve1
SHA256 7e0a7b56249a30f0cff577e0621afeba6598ba591abd2837274677f86f93d8ee
MD5 b1f54daf6ab8e83cbeb0e3a34ec2ea1a
SHA1 d1ced3f93b8425a15ab9adb0f9712af0be82636d
SHA512 ffe5b52794325c3220510266e0a0ab09a1ccc5e78d8d0fd2fb301bb70c7cd16e93acc8d4b7ad9d91a4817884caa36c6fd19fba81866de8b9b1784f4ea11e0322
SSDEEP 3072:D7fV9v1KoQjk4CYIun1d4p4gMR4YfJo70ydaeKDLSt4:Dv1KoQjk47AhAeabSy
TLSH
T11D347D4337D88032E0B34BB1697B93455E36BD350AB2C54E33A8B58D1E71780E6BA797
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_b1f54daf6ab8e83cbeb0e3a34ec2ea1a_elex_rhadamanthys_stop

File Explorer

2026-08-08_b1f54daf6ab8e83cbeb0e3a34ec2ea1a_elex_rhadamanthys_stop

.exe 242KB

2026-08-08_b1f54daf6ab8e83cbeb0e3a34ec2ea1a_elex_rhadamanthys_stop

IMPHASH 9135dd62a76519fbb901484cd96ec33f
SHA256 7e0a7b56249a30f0cff577e0621afeba6598ba591abd2837274677f86f93d8ee
MD5 b1f54daf6ab8e83cbeb0e3a34ec2ea1a
SHA1 d1ced3f93b8425a15ab9adb0f9712af0be82636d
SHA512 ffe5b52794325c3220510266e0a0ab09a1ccc5e78d8d0fd2fb301bb70c7cd16e93acc8d4b7ad9d91a4817884caa36c6fd19fba81866de8b9b1784f4ea11e0322
SSDEEP 3072:D7fV9v1KoQjk4CYIun1d4p4gMR4YfJo70ydaeKDLSt4:Dv1KoQjk47AhAeabSy
TLSH
T11D347D4337D88032E0B34BB1697B93455E36BD350AB2C54E33A8B58D1E71780E6BA797
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6016

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaEnd __vbaFreeVarList __vbaPut3 _adj_fdiv_m64 __vbaPut4 __vbaNextEachVar _adj_fprem1 ord518 ord519 __vbaStrCat __vbaVarCmpNe __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaVarForInit __vbaExitProc ord593 ord594 __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i ord598 __vbaBoolVarNull __vbaVargVar _CIsin ord525 ord632 __vbaChkstk ord526 __vbaFileClose __vbaGenerateBoundsError ord529 __vbaGet3 __vbaGet4 __vbaVarTstEq __vbaObjVar DllFunctionCall __vbaVarOr __vbaVarLateMemSt ord670 _adj_fpatan ord600 _CIsqrt __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord608 ord716 __vbaFPException __vbaInStrVar __vbaStrVarVal __vbaVarCat ord535 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaVarLateMemCallLdRf ord570 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList ord576 _adj_fdivr_m32 _adj_fdiv_r ord578 ord100 __vbaVarSetVar __vbaI4Var __vbaVarCmpEq __vbaLateMemCall __vbaVarAdd __vbaStrToAnsi __vbaVarDup ord616 __vbaFpI4 __vbaVarLateMemCallLd __vbaVarCopy __vbaVarTstGe ord617 __vbaVarSetObjAddref _CIatan __vbaStrMove __vbaForEachVar _allmul _CItan __vbaAryUnlock __vbaFPInt __vbaVarForNext _CIexp __vbaMidStmtBstr __vbaFreeObj ord580 __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_b1f54daf6ab8e83cbeb0e3a34ec2ea1a_elex_rhadamanthys_stop

msvbvm60

generic