General
- Target 2026-08-28_686320e0b66e323f2ee1a783daefcc98_elex_rhadamanthys_stop
- Size 996KB
- Sample260828-shbgesbl4v
- SHA256 bebd0d56354795e5d9302f5b686396cc84778ea1850f56e3cd8135c6b7779984
- MD5 686320e0b66e323f2ee1a783daefcc98
- SHA1 a5c0d88f7c259119cf6621bf1fac1cb470197308
- SHA512 c0fdda21dea44c9af0764d8b87cb9a0bfa4b53a93195a78d9bc42094cc393ccf10e530a8985ed0195a1884ab0e7b8c39ff50d67aa2ad3a6506c7607045710b05
- SSDEEP 24576:va1Dd70iTWCaVUlJsweNwd0KpLrUXNJiF5fnH:aDd79WCwk0weK94XaFJH
- TLSH T1B725E01077D0C03AF5B32A768ABFD724542DB8725F6A46CFA388162D4D70AE1EA31717
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_686320e0b66e323f2ee1a783daefcc98_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_686320e0b66e323f2ee1a783daefcc98_elex_rhadamanthys_stop
- Size 996KB
- SHA256 bebd0d56354795e5d9302f5b686396cc84778ea1850f56e3cd8135c6b7779984
- MD5 686320e0b66e323f2ee1a783daefcc98
- SHA1 a5c0d88f7c259119cf6621bf1fac1cb470197308
- SHA512 c0fdda21dea44c9af0764d8b87cb9a0bfa4b53a93195a78d9bc42094cc393ccf10e530a8985ed0195a1884ab0e7b8c39ff50d67aa2ad3a6506c7607045710b05
- SSDEEP 24576:va1Dd70iTWCaVUlJsweNwd0KpLrUXNJiF5fnH:aDd79WCwk0weK94XaFJH
- TLSH T1B725E01077D0C03AF5B32A768ABFD724542DB8725F6A46CFA388162D4D70AE1EA31717
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1