General
- Target 2026-08-16_ddfef5f0f05a7374544f6f0c07f6b182_elex_rhadamanthys_stop
- Size 996KB
- Sample260816-d32rsazsbs
- SHA256 f50036c2b51c32034ec4d855d4dfd787766bd8dc2d54b40deab7c1029e373167
- MD5 ddfef5f0f05a7374544f6f0c07f6b182
- SHA1 63d4c47a0781ee12fada8e9bcd66d6bbc12182d5
- SHA512 d2eca960eb8e43dccf80cd3403db999eab3abbc485b1abb3f691c070e907b58b469dbab2485ba225a4c7f877559bd8d155a0d9b6a7ef26c9ee766d3c2a6a8842
- SSDEEP 24576:Bw1Dd70iTWCrVDB3Jw8QkVO+GftQuksrqLsN:GDd79WCrhBCD/fxkAqy
- TLSH T13F25F12177D0C135F1B329768A7FE724652DB8715F6886CFA388162E5EB06D0EA30B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_ddfef5f0f05a7374544f6f0c07f6b182_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_ddfef5f0f05a7374544f6f0c07f6b182_elex_rhadamanthys_stop
- Size 996KB
- SHA256 f50036c2b51c32034ec4d855d4dfd787766bd8dc2d54b40deab7c1029e373167
- MD5 ddfef5f0f05a7374544f6f0c07f6b182
- SHA1 63d4c47a0781ee12fada8e9bcd66d6bbc12182d5
- SHA512 d2eca960eb8e43dccf80cd3403db999eab3abbc485b1abb3f691c070e907b58b469dbab2485ba225a4c7f877559bd8d155a0d9b6a7ef26c9ee766d3c2a6a8842
- SSDEEP 24576:Bw1Dd70iTWCrVDB3Jw8QkVO+GftQuksrqLsN:GDd79WCrhBCD/fxkAqy
- TLSH T13F25F12177D0C135F1B329768A7FE724652DB8715F6886CFA388162E5EB06D0EA30B17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1