2026-08-22_3b19b80d4dc2f2be00d3ad4f66f8e28e_elex_rhadamanthys_stop

General

Target
2026-08-22_3b19b80d4dc2f2be00d3ad4f66f8e28e_elex_rhadamanthys_stop
Size 648KB
Sample260823-lsajjsfq31
SHA256 9ba32f62934b5ea413717f6a2518e1dd7f97bd52c14d6ab405f520c4cb4eec1a
MD5 3b19b80d4dc2f2be00d3ad4f66f8e28e
SHA1 b2f6f3e8f883c9dcf2fee3235332e39240ad5696
SHA512 45da260863ff9c7f239415c264d3d7bd11ce4c2f54a43db22a9207e68b4eee4ed4187e88686b3a93d24478c8edbacb556532f5429a00474136e2a1922e16cbb1
SSDEEP 12288:KJApRA65EYjjQucIfMtyB9BbAFX2a7VwdrwtUMa/VWjZgi8I1LQNa5/gtiBGm:fR6YP5eS9RAFX26KO1a/oj78ycRiBd
TLSH
T1F4E423213CA3C073D94586708048C3D0AF7FAD5336BB98A7F785579B99B43A25E573A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-22_3b19b80d4dc2f2be00d3ad4f66f8e28e_elex_rhadamanthys_stop

File Explorer

2026-08-22_3b19b80d4dc2f2be00d3ad4f66f8e28e_elex_rhadamanthys_stop

.exe 648KB

2026-08-22_3b19b80d4dc2f2be00d3ad4f66f8e28e_elex_rhadamanthys_stop

IMPHASH e865c201423cde4808175edf07c06249
SHA256 9ba32f62934b5ea413717f6a2518e1dd7f97bd52c14d6ab405f520c4cb4eec1a
MD5 3b19b80d4dc2f2be00d3ad4f66f8e28e
SHA1 b2f6f3e8f883c9dcf2fee3235332e39240ad5696
SHA512 45da260863ff9c7f239415c264d3d7bd11ce4c2f54a43db22a9207e68b4eee4ed4187e88686b3a93d24478c8edbacb556532f5429a00474136e2a1922e16cbb1
SSDEEP 12288:KJApRA65EYjjQucIfMtyB9BbAFX2a7VwdrwtUMa/VWjZgi8I1LQNa5/gtiBGm:fR6YP5eS9RAFX26KO1a/oj78ycRiBd
TLSH
T1F4E423213CA3C073D94586708048C3D0AF7FAD5336BB98A7F785579B99B43A25E573A0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7985

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\SVN\AutoInstall\Release\AutoInst.pdb

kernel32

CloseHandle SetCurrentDirectoryW GetExitCodeProcess GetSystemDefaultLangID GetVersionExW WaitForSingleObject CreateProcessW GetCurrentDirectoryW GetModuleFileNameW HeapFree GetVersionExA HeapAlloc GetProcessHeap EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetLastError GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleA GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId MultiByteToWideChar LCMapStringA WideCharToMultiByte LCMapStringW ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep CreateFileW InitializeCriticalSection VirtualAlloc HeapReAlloc GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryA SetFilePointer SetEndOfFile ReadFile WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA

advapi32

RegSetValueExW RegCreateKeyExW RegCloseKey

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-22_3b19b80d4dc2f2be00d3ad4f66f8e28e_elex_rhadamanthys_stop

kernel32

advapi32

generic