Overview

overview

10

Static

static

10

2026-08-17...ys.exe

windows10-2004-x64

4

2026-08-17...ys.exe

windows11-ltsc_2024-x64

4

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...in.dll

windows10-2004-x64

3

$PLUGINSDI...in.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ta.dll

windows10-2004-x64

3

$PLUGINSDI...ta.dll

windows11-ltsc_2024-x64

3

$_17_/Game...ll.exe

windows10-2004-x64

3

$_17_/Game...ll.exe

windows11-ltsc_2024-x64

3

$_17_/Game...ct.dll

windows10-2004-x64

3

$_17_/Game...ct.dll

windows11-ltsc_2024-x64

3

$_22_/clear_cache.exe

windows10-2004-x64

3

$_22_/clear_cache.exe

windows11-ltsc_2024-x64

3

$_56_/2345DLAgent.dll

windows10-2004-x64

3

$_56_/2345DLAgent.dll

windows11-ltsc_2024-x64

3

$_56_/2345...er.exe

windows10-2004-x64

9

$_56_/2345...er.exe

windows11-ltsc_2024-x64

9

$_56_/2345...er.exe

windows10-2004-x64

3

$_56_/2345...er.exe

windows11-ltsc_2024-x64

3

$_56_/Assi...LL.dll

windows10-2004-x64

3

$_56_/Assi...LL.dll

windows11-ltsc_2024-x64

3

$_56_/Assi...64.dll

windows10-2004-x64

8

$_56_/Assi...64.dll

windows11-ltsc_2024-x64

3

$_56_/Assi...64.exe

windows10-2004-x64

1

$_56_/Assi...64.exe

windows11-ltsc_2024-x64

1

$_56_/Assi...ol.dll

windows10-2004-x64

3

$_56_/Assi...ol.dll

windows11-ltsc_2024-x64

3

$_56_/Assi...er.exe

windows10-2004-x64

3

$_56_/Assi...er.exe

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    140s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    17/08/2026, 02:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-17_30532d7d193074a4b6431117e6d4de49_elex_maze_rhadamanthys.exe
  • Size 57.9MB
  • Sample260817-ctkaps1hpe
  • SHA256 d684739c98d7ba884f3f985c5168226fd74b53e93cd5dd288a9ac4dd5cdbec99
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 54 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-17_30532d7d193074a4b6431117e6d4de49_elex_maze_rhadamanthys.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-17_30532d7d193074a4b6431117e6d4de49_elex_maze_rhadamanthys.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:1860

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        FileInfo.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa5106.tmp\FileInfo.dll
        • Size 6.5MB
        • SHA256 52244ecbbb5f22dfdf42eb3a85f6c4e15b284bb4bee4455f95d26595f5ab7658
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RCWidgetPlugin.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa5106.tmp\RCWidgetPlugin.dll
        • Size 1.3MB
        • SHA256 8fd594a8c6923dd05b0312fc3d91c909fe6c126728cf49878592595b4a4ccaea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa5106.tmp\System.dll
        • Size 28KB
        • SHA256 86ec9f64c3635568a18c11c94e81e8cb20b94e1d97a192132bc55f9281909d60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1860-18-0x00000000127D0000-0x00000000127D1000-memory.dmp
        Download