2026-08-15_2237da8e2324b6b25ce2379080938eff_elex_rhadamanthys_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-15_2237da8e2324b6b25ce2379080938eff_elex_rhadamanthys_stop
Size 501KB
Sample260815-exkrrayeqd
SHA256 c4977afa66476d0ca842b1508a83034edbfe5a13aeeab88083a4b0e0c10422b2
MD5 2237da8e2324b6b25ce2379080938eff
SHA1 20de39656a566046c23e0b8361baf31ab66e8f92
SHA512 7dd3fa6125ed28df75def099234fce32f507b62370452d60dd7589fef66eebd1ab97ea4228e912c06f8b93c302750ea00a88f64610f28153531f459c744a7cf3
SSDEEP 12288:GBhvKRuGiIGrm+Su8DzIr+EuK4LXJXga5:ci0GiIL+SPEuK4LXlb5
TLSH
T1A0B48C117BE0C076C26225B54D96E7B566BAA9704F2147C37BD42F7E6F302D1AE3830A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-08-15_2237da8e2324b6b25ce2379080938eff_elex_rhadamanthys_stop

.exe 501KB

2026-08-15_2237da8e2324b6b25ce2379080938eff_elex_rhadamanthys_stop

IMPHASH 4f4128965f8b5571e99da347bf457ff4
SHA256 c4977afa66476d0ca842b1508a83034edbfe5a13aeeab88083a4b0e0c10422b2
MD5 2237da8e2324b6b25ce2379080938eff
SHA1 20de39656a566046c23e0b8361baf31ab66e8f92
SHA512 7dd3fa6125ed28df75def099234fce32f507b62370452d60dd7589fef66eebd1ab97ea4228e912c06f8b93c302750ea00a88f64610f28153531f459c744a7cf3
SSDEEP 12288:GBhvKRuGiIGrm+Su8DzIr+EuK4LXJXga5:ci0GiIL+SPEuK4LXlb5
TLSH
T1A0B48C117BE0C076C26225B54D96E7B566BAA9704F2147C37BD42F7E6F302D1AE3830A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

4a:48:37:06:b8:7f:42:ba:dd:b2:4d:78:15:4f:3d:c3:0b:35:ff:43:1f:e2:a7:f6:da:4f:dc:38:0e:8c:4d:1e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Aug 7, 2026

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

64:e5:a3:e5:76:e3:11:59:17:fa:2b:91:65:de:14:0a:22:ae:42:57

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

Aug 7, 2026

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

05:00:ec:1f:15:cf:66:07:33:22:2f:e6:80:c4:90:cb

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 22, 2025 - Jul 21, 2028

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

215005

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

I:\WorkFolder\5.0\exe\vc\AutoUpdate\sourcecode\Release\AutoUpdate.pdb

kernel32

GetFileTime GetTickCount GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime HeapFree HeapAlloc RtlUnwind RaiseException HeapReAlloc ExitProcess HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree GetFileSizeEx GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW GetTimeZoneInformation InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetCurrentDirectoryA GetDriveTypeA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA SetErrorMode GlobalFlags lstrlenA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement FileTimeToLocalFileTime FileTimeToSystemTime FindNextFileW GetFullPathNameW GetVolumeInformationW DuplicateHandle SetEndOfFile UnlockFile LockFile FlushFileBuffers GetThreadLocale GetModuleHandleA InterlockedDecrement GlobalFindAtomW GetVersionExW CompareStringW LoadLibraryA GetVersionExA GetCurrentProcessId GlobalAddAtomW FreeResource GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesW lstrcmpA GetLocaleInfoW CompareStringA lstrcmpW GetModuleHandleW SetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock lstrlenW MulDiv CopyFileW FreeLibrary GetProcAddress LoadLibraryW Sleep RemoveDirectoryW DeleteFileW SetFileAttributesW GetModuleFileNameW ExpandEnvironmentStringsW SetFileTime WriteFile CreateDirectoryW GetFileAttributesW WideCharToMultiByte LocalFileTimeToFileTime MultiByteToWideChar GetCurrentDirectoryW SystemTimeToFileTime SetFilePointer GetPrivateProfileIntW WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileSectionW FindClose FindFirstFileW CreateThread LocalFree FormatMessageW GetLastError InterlockedExchange ReadFile GetFileSize CreateFileW FindResourceW LoadResource LockResource SizeofResource CloseHandle GetCurrentProcess QueryPerformanceCounter GetCommandLineW InterlockedCompareExchange

user32

RegisterClipboardFormatW PostThreadMessageW GetClassNameW SetPropW GetPropW RemovePropW SetFocus GetWindowTextW GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW GetSysColor AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW GetMenu SetWindowLongW OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindowThreadProcessId GetLastActivePopup MessageBeep SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage IsWindowVisible GetKeyState GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus ModifyMenuW EnableMenuItem CheckMenuItem ReleaseDC GetDC CopyRect GetDesktopWindow GetActiveWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow IsWindow GetWindowLongW GetDlgItem IsWindowEnabled GetNextDlgTabItem EndDialog GetWindow SetWindowContextHelpId GetParent MapDialogRect SetWindowPos PostQuitMessage PostMessageW GetMenuState EnableWindow LoadIconW GetNextDlgGroupItem InvalidateRgn GetMenuItemID GetMenuItemCount GetSubMenu wsprintfW DispatchMessageW PeekMessageW MsgWaitForMultipleObjects SetTimer KillTimer DrawIcon GetClientRect GetSystemMetrics IsIconic SendMessageW UnregisterClassW DestroyMenu InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableW CharNextW ReleaseCapture SetCapture LoadCursorW GetSysColorBrush CharUpperW EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW ShowWindow MoveWindow SetWindowTextW IsDialogMessageW RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild MessageBoxW GetClassLongW GetCapture

gdi32

DeleteObject GetViewportExtEx GetWindowExtEx PtVisible RectVisible TextOutW ExtTextOutW Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor GetRgnBox GetMapMode SetMapMode RestoreDC SaveDC GetObjectW SetBkColor SetTextColor GetClipBox CreateBitmap CreateRectRgnIndirect GetDeviceCaps

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

advapi32

RegSetValueExW LookupPrivilegeValueW AdjustTokenPrivileges RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW OpenProcessToken

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW StrFormatByteSizeW PathFindFileNameW PathStripToRootW PathIsUNCW PathIsDirectoryW PathFileExistsW

oledlg

OleUIBusyW

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoTaskMemAlloc CoTaskMemFree CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

SysStringLen VariantTimeToSystemTime SysFreeString SysAllocStringLen VariantClear VariantChangeType VariantInit VariantCopy SafeArrayDestroy OleCreateFontIndirect SysAllocString SystemTimeToVariantTime

urlmon

URLDownloadToFileW

crashreport

ord1

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_2237da8e2324b6b25ce2379080938eff_elex_rhadamanthys_stop

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

crashreport

version

generic