2026-08-09_7341af095e97ff3ada53ef50b545f25f_elex_rhadamanthys_stop

General

Target
2026-08-09_7341af095e97ff3ada53ef50b545f25f_elex_rhadamanthys_stop
Size 1.3MB
Sample260809-w416ratdjd
SHA256 d3cfd3d0fb748a85b3b6f20c56f4349cda4f5404c3fcfdd8d187366439a475e9
MD5 7341af095e97ff3ada53ef50b545f25f
SHA1 073538cdbac8db7b3725b1fbfcf09adc4d30c8fc
SHA512 6a8e68594af5516103556b01d89bf3957c7b91aa98b85dbe42d0f9c74613cd53bce5e588bcae492468d26e2d6c514327308265053a60ab561ec2ad8b46107e42
SSDEEP 12288:iLYGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMW/:RnQ/tbw/2Mkjy6Fr7g0o/
TLSH
T15C5512192902D463FB160BB04982D5C04BBE0DBB3BD1E25FFB28393A557529705B729E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_7341af095e97ff3ada53ef50b545f25f_elex_rhadamanthys_stop

File Explorer

2026-08-09_7341af095e97ff3ada53ef50b545f25f_elex_rhadamanthys_stop

.exe 1.3MB

2026-08-09_7341af095e97ff3ada53ef50b545f25f_elex_rhadamanthys_stop

IMPHASH 879357f6d811f29ec01713e34e47abda
SHA256 d3cfd3d0fb748a85b3b6f20c56f4349cda4f5404c3fcfdd8d187366439a475e9
MD5 7341af095e97ff3ada53ef50b545f25f
SHA1 073538cdbac8db7b3725b1fbfcf09adc4d30c8fc
SHA512 6a8e68594af5516103556b01d89bf3957c7b91aa98b85dbe42d0f9c74613cd53bce5e588bcae492468d26e2d6c514327308265053a60ab561ec2ad8b46107e42
SSDEEP 12288:iLYGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMW/:RnQ/tbw/2Mkjy6Fr7g0o/
TLSH
T15C5512192902D463FB160BB04982D5C04BBE0DBB3BD1E25FFB28393A557529705B729E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6603

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Recent\ATKRelation\ATK Hotkey\SentelicTPCfg\release\SentelicTPCfg.pdb

kernel32

LoadLibraryW GetProcAddress FreeLibrary GetCommandLineW GlobalFree LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA WideCharToMultiByte GetLocaleInfoA HeapSize RtlUnwind HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleA ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsA MultiByteToWideChar GetEnvironmentStrings FreeEnvironmentStringsW GetLastError GetEnvironmentStringsW GetCommandLineA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSection Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc

user32

GetDlgItem FindWindowW LoadStringW RegisterWindowMessageW DefWindowProcW PostQuitMessage RegisterClassExW LoadCursorW LoadIconW DispatchMessageW TranslateMessage GetMessageW PostMessageW CreateWindowExW

shell32

CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_7341af095e97ff3ada53ef50b545f25f_elex_rhadamanthys_stop

kernel32

user32

shell32

generic