General
- Target 2026-08-27_100a499ead5bfef2b7bd26c3ac7ee1f6_elex_rhadamanthys_stop
- Size 996KB
- Sample260827-2tpmvs1fka
- SHA256 4eda4846ad5ae166a189d0e7de7b06bb085d04c8ec4f23a124c18d52965807c9
- MD5 100a499ead5bfef2b7bd26c3ac7ee1f6
- SHA1 0f9d8964afe7c02f90bd9b55e0199bfef5c3b014
- SHA512 6a8ee24bb2d600e8701dee60fd90b481fa308a844bc0c0763c2974bf5e5a14826ba875c73c9c02c944eb5ce5a18856c8194aae8618e576f4fa169abfec919838
- SSDEEP 24576:1E1Dd70iTWCQiLKiQhYxjSVLJ5RKJ0FrxISg:uDd79WC7pQhdVhFFhg
- TLSH T1DD25F01177908135F1B328768A7FD724252DB9711FA886CFE7C8162D5DB06E0EA31B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_100a499ead5bfef2b7bd26c3ac7ee1f6_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_100a499ead5bfef2b7bd26c3ac7ee1f6_elex_rhadamanthys_stop
- Size 996KB
- SHA256 4eda4846ad5ae166a189d0e7de7b06bb085d04c8ec4f23a124c18d52965807c9
- MD5 100a499ead5bfef2b7bd26c3ac7ee1f6
- SHA1 0f9d8964afe7c02f90bd9b55e0199bfef5c3b014
- SHA512 6a8ee24bb2d600e8701dee60fd90b481fa308a844bc0c0763c2974bf5e5a14826ba875c73c9c02c944eb5ce5a18856c8194aae8618e576f4fa169abfec919838
- SSDEEP 24576:1E1Dd70iTWCQiLKiQhYxjSVLJ5RKJ0FrxISg:uDd79WC7pQhdVhFFhg
- TLSH T1DD25F01177908135F1B328768A7FD724252DB9711FA886CFE7C8162D5DB06E0EA31B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1