2026-08-22_bfb2b28cffb160bc8cd46f7c84ef0245_elex_rhadamanthys_stop

General

Target
2026-08-22_bfb2b28cffb160bc8cd46f7c84ef0245_elex_rhadamanthys_stop
Size 4.4MB
Sample260822-d59kea1anc
SHA256 a181833c1273f55e84544c5ac98fe210ee747b4ee57f5d9271da60e5ee9c331a
MD5 bfb2b28cffb160bc8cd46f7c84ef0245
SHA1 da7571d87b414c13687e637ecc6f074d7aa7a02e
SHA512 bc74895229701b67004e94ab5c028809e534ae1bb26b4de1453b3c8bb9926be6d93c4073a13c525c9dc571ef89caf3397806562e41bf62fd549cf95a4a637be6
SSDEEP 98304:2RTQC4mam29zZg8FiiuCo5Ew99fEXZjUMfFR18WdAYL53:0QC6m29zBIx51pESMBJ53
TLSH
T1962633553312E67FFF09767285A7EAA2572149B0AA40E30B365301442B74BBC1FB5EF2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-08-22_bfb2b28cffb160bc8cd46f7c84ef0245_elex_rhadamanthys_stop

File Explorer

2026-08-22_bfb2b28cffb160bc8cd46f7c84ef0245_elex_rhadamanthys_stop

.exe 4.4MB

2026-08-22_bfb2b28cffb160bc8cd46f7c84ef0245_elex_rhadamanthys_stop

IMPHASH be3932e3a098cfda071ebaa81fe7e38a
SHA256 a181833c1273f55e84544c5ac98fe210ee747b4ee57f5d9271da60e5ee9c331a
MD5 bfb2b28cffb160bc8cd46f7c84ef0245
SHA1 da7571d87b414c13687e637ecc6f074d7aa7a02e
SHA512 bc74895229701b67004e94ab5c028809e534ae1bb26b4de1453b3c8bb9926be6d93c4073a13c525c9dc571ef89caf3397806562e41bf62fd549cf95a4a637be6
SSDEEP 98304:2RTQC4mam29zZg8FiiuCo5Ew99fEXZjUMfFR18WdAYL53:0QC6m29zBIx51pESMBJ53
TLSH
T1962633553312E67FFF09767285A7EAA2572149B0AA40E30B365301442B74BBC1FB5EF2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

38:ed:7c:f7:5e:9f:4a:e2:e6:98:95:10:ef:c1:bb:d1:71:96:6c:d6:bc:62:f9:e0:ac:89:2e:74:b6:14:e8:50

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10188

Chains

Aug 21, 2026

POSTALCODE=10188

Minor OS version

0

Major OS version

5

Entry point

8328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yezu.pdb

kernel32

GetDefaultCommConfigW WriteConsoleOutputW HeapAlloc EndUpdateResourceW InterlockedIncrement GetCurrentProcess SetEnvironmentVariableW GetEnvironmentStringsW EnumCalendarInfoExW GetConsoleAliasesLengthA GetConsoleTitleA WriteFile GetUserDefaultLangID GetEnvironmentStrings GlobalAlloc SetVolumeMountPointA GetSystemWindowsDirectoryA lstrcpynW VerifyVersionInfoA HeapQueryInformation lstrlenA LCMapStringA GetCPInfoExW ChangeTimerQueueTimer GetProcAddress GetComputerNameExW CreateTimerQueueTimer FreeUserPhysicalPages EnterCriticalSection VerLanguageNameW GetLocalTime LoadLibraryA GetCurrentConsoleFont WaitForMultipleObjects GetOEMCP VirtualProtect PeekConsoleInputA FindFirstVolumeA GetVersionExA ReadConsoleInputW GetVersion AddConsoleAliasA CreateThread CreateFileA GetModuleFileNameW GetCommandLineW SetStdHandle WriteConsoleW WideCharToMultiByte InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW GetCPInfo RtlUnwind LCMapStringW GetStringTypeW GetStdHandle GetModuleFileNameA HeapCreate VirtualFree VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP IsValidCodePage GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP

user32

ClientToScreen RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-22_bfb2b28cffb160bc8cd46f7c84ef0245_elex_rhadamanthys_stop

PE Signature issue

kernel32

user32

generic