2026-08-17_388d0dd459c6a6138d37a6f7b9da4c79_elex_floxif_rhadamanthys_stop

General

Target
2026-08-17_388d0dd459c6a6138d37a6f7b9da4c79_elex_floxif_rhadamanthys_stop
Size 120KB
Sample260817-cskvvasscw
SHA256 822a68025511ca8d4adf0b80b9328f6bb4efea279d79a5fcd139ade099f69388
MD5 388d0dd459c6a6138d37a6f7b9da4c79
SHA1 7e6b3f7933a4fb82d920599c8a87335debe7c268
SHA512 b05d7da575d567f0fd21631f9ffee2f09451a78e54fddab79c865f0a6f645f147d7a9cf9d69caef20850548290809f0f5156c5e1ad2ae641b3e33409cfc199c1
SSDEEP 1536:ThtnDLPlhMf9G7W6j+31BTN2s+zheW6BVrqzCJ3bdDY+W14N4NmzWlIA7hKRQQAW:Txi6j+31H2lQBV+UdE+rECWp7hKD46
TLSH
T1F2C3CF013990C3FED0611130306DAA50A9D6AD3D0BFF509BE71A068DAF6D7939B9D72B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-17_388d0dd459c6a6138d37a6f7b9da4c79_elex_floxif_rhadamanthys_stop

File Explorer

2026-08-17_388d0dd459c6a6138d37a6f7b9da4c79_elex_floxif_rhadamanthys_stop

.exe 120KB

2026-08-17_388d0dd459c6a6138d37a6f7b9da4c79_elex_floxif_rhadamanthys_stop

IMPHASH dbcb2b17ae8fa7f519877743f3318b7b
SHA256 822a68025511ca8d4adf0b80b9328f6bb4efea279d79a5fcd139ade099f69388
MD5 388d0dd459c6a6138d37a6f7b9da4c79
SHA1 7e6b3f7933a4fb82d920599c8a87335debe7c268
SHA512 b05d7da575d567f0fd21631f9ffee2f09451a78e54fddab79c865f0a6f645f147d7a9cf9d69caef20850548290809f0f5156c5e1ad2ae641b3e33409cfc199c1
SSDEEP 1536:ThtnDLPlhMf9G7W6j+31BTN2s+zheW6BVrqzCJ3bdDY+W14N4NmzWlIA7hKRQQAW:Txi6j+31H2lQBV+UdE+rECWp7hKD46
TLSH
T1F2C3CF013990C3FED0611130306DAA50A9D6AD3D0BFF509BE71A068DAF6D7939B9D72B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6720

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryA GetModuleFileNameA GetFullPathNameA GetCommandLineW MultiByteToWideChar WideCharToMultiByte ExpandEnvironmentStringsA GetProcAddress LoadLibraryA CreateFileMappingA RtlUnwind InitializeCriticalSectionAndSpinCount HeapSize GetLocaleInfoA MapViewOfFile GetLastError CloseHandle GetCommandLineA GetStartupInfoA HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetStringTypeA GetStringTypeW HeapAlloc RaiseException Sleep ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc LCMapStringA LCMapStringW

user32

GetMessageA TranslateMessage DispatchMessageA LoadIconA LoadCursorA DefWindowProcA GetDesktopWindow IsWindow PostQuitMessage SetTimer CreateWindowExA RegisterClassExA

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA

shell32

CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-17_388d0dd459c6a6138d37a6f7b9da4c79_elex_floxif_rhadamanthys_stop

kernel32

user32

advapi32

shell32

generic