General
- Target 2026-08-16_be0f2f9f45aee594c6d60c69391f47e0_elex_rhadamanthys_stop
- Size 996KB
- Sample260816-ebwl5acn3t
- SHA256 7d687f4fcbcdd15113142ed6b880322d7df09cfcadc76ccb97d403da0384c2e7
- MD5 be0f2f9f45aee594c6d60c69391f47e0
- SHA1 f8cbea92047e74966bb563668b15a43cb0982ffe
- SHA512 88835afe594d8eae238a54b003de7f9ad70c4bf7043f50db7278a23d5bf60be47f738465b1b2cf9e3fcaf36836af291fbdb866a8ed7612e02dab9fbd7503a06a
- SSDEEP 24576:1a1Dd70iTWCHcyyXuhtOKV2gYT1pMoJkabqD:MDd79WC8h+R+1pNJbbqD
- TLSH T18125F11173D0C035F1B328768ABF9729112DB8725FA985CFA3C8166E5E706E1E631B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_be0f2f9f45aee594c6d60c69391f47e0_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_be0f2f9f45aee594c6d60c69391f47e0_elex_rhadamanthys_stop
- Size 996KB
- SHA256 7d687f4fcbcdd15113142ed6b880322d7df09cfcadc76ccb97d403da0384c2e7
- MD5 be0f2f9f45aee594c6d60c69391f47e0
- SHA1 f8cbea92047e74966bb563668b15a43cb0982ffe
- SHA512 88835afe594d8eae238a54b003de7f9ad70c4bf7043f50db7278a23d5bf60be47f738465b1b2cf9e3fcaf36836af291fbdb866a8ed7612e02dab9fbd7503a06a
- SSDEEP 24576:1a1Dd70iTWCHcyyXuhtOKV2gYT1pMoJkabqD:MDd79WC8h+R+1pNJbbqD
- TLSH T18125F11173D0C035F1B328768ABF9729112DB8725FA985CFA3C8166E5E706E1E631B27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1