General
- Target 2026-08-16_96f2b9a8a7de513d17f185c1b1a6f528_elex_rhadamanthys_stop
- Size 996KB
- Sample260816-envwcscp9w
- SHA256 ace3596e9fba390ab305c8ae56589512b6413410bcc57654e714777d518bc175
- MD5 96f2b9a8a7de513d17f185c1b1a6f528
- SHA1 94a33f8a66f881f8954688b5e53595e9f348f76a
- SHA512 dc567c8a82408a2760bda8066ee4ffe59f4aeab1edeaf1bf5876d68e92a4e41b8bd82a9c1721de661ad25d2143927a5fedff78747a42819895ca5546dd2eb04c
- SSDEEP 24576:Bw1Dd70iTWCjuVDB3Jw8QkVO+GftQuksrqLsN:GDd79WCjuhBCD/fxkAqy
- TLSH T18925F12177D0C135F1B329768A7FE724552DB8715F6886CFA388162E5EB06D0EA30B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_96f2b9a8a7de513d17f185c1b1a6f528_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_96f2b9a8a7de513d17f185c1b1a6f528_elex_rhadamanthys_stop
- Size 996KB
- SHA256 ace3596e9fba390ab305c8ae56589512b6413410bcc57654e714777d518bc175
- MD5 96f2b9a8a7de513d17f185c1b1a6f528
- SHA1 94a33f8a66f881f8954688b5e53595e9f348f76a
- SHA512 dc567c8a82408a2760bda8066ee4ffe59f4aeab1edeaf1bf5876d68e92a4e41b8bd82a9c1721de661ad25d2143927a5fedff78747a42819895ca5546dd2eb04c
- SSDEEP 24576:Bw1Dd70iTWCjuVDB3Jw8QkVO+GftQuksrqLsN:GDd79WCjuhBCD/fxkAqy
- TLSH T18925F12177D0C135F1B329768A7FE724552DB8715F6886CFA388162E5EB06D0EA30B27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1