2026-08-08_4470877302c55b5a22c427170b54c096_elex_floxif_rhadamanthys_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_4470877302c55b5a22c427170b54c096_elex_floxif_rhadamanthys_stop
Size 336KB
Sample260808-wkyxaasbpe
SHA256 bbb41d8d1e8120189943b270dbb6e5c9f45cd0b9a4df5b155eb49d1cc266ba22
MD5 4470877302c55b5a22c427170b54c096
SHA1 fa7a466b3e387bf7d1b3d0f4b4cbe76ecf0250c2
SHA512 4a4f32ba446e1eb31e902813ffa84c3b2cc218d6b5cc63a615407d78d25083c211adcf21b02a632cf16dc6838d1017e36cbe63ed0e4bcaa1e7d0ee4773195726
SSDEEP 6144:dQlpqdDD2zM3Q9wD/bKPI1WNp8OIIIIIIIg8ZUBV+UdvrEFp7hK/0:2lpcD2X9wbbcI1WQOIIIIIIIg8ZUBjvG
TLSH
T16E74BF6332D0C3FAD6560471345FDE15AAF1BC3D4A3A428BAB810A8C5EFD352BB19356
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-08_4470877302c55b5a22c427170b54c096_elex_floxif_rhadamanthys_stop

File Explorer

2026-08-08_4470877302c55b5a22c427170b54c096_elex_floxif_rhadamanthys_stop

.exe 336KB

2026-08-08_4470877302c55b5a22c427170b54c096_elex_floxif_rhadamanthys_stop

IMPHASH a795c5ea88de7a0c7145a18e03315deb
SHA256 bbb41d8d1e8120189943b270dbb6e5c9f45cd0b9a4df5b155eb49d1cc266ba22
MD5 4470877302c55b5a22c427170b54c096
SHA1 fa7a466b3e387bf7d1b3d0f4b4cbe76ecf0250c2
SHA512 4a4f32ba446e1eb31e902813ffa84c3b2cc218d6b5cc63a615407d78d25083c211adcf21b02a632cf16dc6838d1017e36cbe63ed0e4bcaa1e7d0ee4773195726
SSDEEP 6144:dQlpqdDD2zM3Q9wD/bKPI1WNp8OIIIIIIIg8ZUBV+UdvrEFp7hK/0:2lpcD2X9wbbcI1WQOIIIIIIIg8ZUBjvG
TLSH
T16E74BF6332D0C3FAD6560471345FDE15AAF1BC3D4A3A428BAB810A8C5EFD352BB19356
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

32:27:9b:88:6a:db:e4:16:32:0f:b2:8d:17:de:46:e9:85:9c:10:15

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Jonathan Bennett,C=GB,1.2.840.113549.1.9.1=#0c18737570706f7274406175746f69747363726970742e636f6d

Chains

Sep 10, 2007

CN=Jonathan Bennett,C=GB,1.2.840.113549.1.9.1=#0c18737570706f7274406175746f69747363726970742e636f6d

Subject

CN=Jonathan Bennett,C=GB,1.2.840.113549.1.9.1=#0c18737570706f7274406175746f69747363726970742e636f6d

Serial Number

01:00:00:00:00:01:09:bb:94:49:48

Issuer

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageKeyEncipherment, KeyUsageDataEncipherment

Revocation Status

Not revoked

Timespan

Mar 2, 2006 - Mar 2, 2009

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

02:00:00:00:00:00:d6:78:b7:94:05

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2014

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:08:d9:61:1c:d6

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jan 28, 1999 - Jan 27, 2014

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:08:d9:61:24:48

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jan 22, 2004 - Jan 27, 2014

Minor OS version

Major OS version

Entry point

62815

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord6 InitCommonControlsEx

kernel32

GetTempFileNameA GetCurrentDirectoryA GetFullPathNameA SetCurrentDirectoryA GetModuleFileNameA InitializeCriticalSection CompareStringA GetCommandLineA FindResourceA LoadResource LockResource SizeofResource LoadLibraryExA EnumResourceNamesA FreeLibrary lstrlenA MultiByteToWideChar lstrcmpA lstrcpyA WideCharToMultiByte GetModuleHandleA CreateFileA CloseHandle ReadFile SetFilePointer CreateProcessA GetExitCodeProcess Sleep FindFirstFileA FindClose GetFileAttributesA GetFileSize CopyFileA GetFullPathNameW GetFileTime GetProcAddress CompareStringW SetEndOfFile GetTimeZoneInformation GetLocaleInfoA GetStringTypeW GetStringTypeA WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers LoadLibraryA GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetDriveTypeA HeapSize LCMapStringW LCMapStringA GetStdHandle SetHandleCount SetStdHandle IsValidCodePage GetOEMCP GetACP GetCPInfo GetConsoleMode GetConsoleCP GetTempPathA DeleteFileA WriteFile ExitProcess InterlockedDecrement SetEnvironmentVariableA SetLastError InterlockedIncrement TlsFree GetLastError HeapFree ExitThread GetCurrentThreadId CreateThread FileTimeToSystemTime FileTimeToLocalFileTime GetFileInformationByHandle PeekNamedPipe GetFileType HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetSystemTimeAsFileTime GetVersionExA GetProcessHeap GetStartupInfoA RaiseException RtlUnwind HeapDestroy HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue

user32

MessageBeep GetMessageA LoadStringA TranslateAcceleratorA SendMessageA IsDialogMessageA CharUpperA SetFocus EndDialog UpdateWindow PostMessageA ShowWindow DialogBoxParamA SendDlgItemMessageA GetDlgItem GetDlgItemTextA EnableWindow GetMenu EnableMenuItem SetDlgItemTextA CheckMenuItem DefWindowProcA CreateDialogParamA SetCursor PostQuitMessage LoadAcceleratorsA MessageBoxA DestroyIcon RegisterClassExA LoadIconA LoadImageA LoadCursorA DispatchMessageA GetSystemMenu TranslateMessage

comdlg32

GetSaveFileNameA GetOpenFileNameA

advapi32

RegQueryValueExA RegCloseKey RegCreateKeyExA RegSetValueExA RegOpenKeyExA

shell32

SHGetPathFromIDListA SHGetDesktopFolder SHGetMalloc

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_4470877302c55b5a22c427170b54c096_elex_floxif_rhadamanthys_stop

PE Signature issue

comctl32

kernel32

user32

comdlg32

advapi32

shell32

generic