General
- Target 2026-08-28_3539073dbbb53ef34888ab30fd3678e2_elex_rhadamanthys_stop
- Size 996KB
- Sample260828-xgppwadh47
- SHA256 0e41639c133d83b39fa933a6e87ec108f57557c0ffa5da3baef34dba96beca00
- MD5 3539073dbbb53ef34888ab30fd3678e2
- SHA1 7feb93409dbe18ee3e13223adf0244e73746c3a6
- SHA512 fc00d174e54a3ab9e87b14441ebbb3524dc539355476a314711f1e7b89918efea054b07ab3ed394e65e0cd30fa93eb119336278f385c30d1811ff372ad1cc609
- SSDEEP 24576:Na1Dd70iTWCCJdlXbKL8fHz0/LPRRPUoIyke9b:kDd79WCCJz+gf4/LPRxBke1
- TLSH T1DF25E01177E0C136F1B368768A7F9734552C78715F6886CFA388166E4DB06E1EA30B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_3539073dbbb53ef34888ab30fd3678e2_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_3539073dbbb53ef34888ab30fd3678e2_elex_rhadamanthys_stop
- Size 996KB
- SHA256 0e41639c133d83b39fa933a6e87ec108f57557c0ffa5da3baef34dba96beca00
- MD5 3539073dbbb53ef34888ab30fd3678e2
- SHA1 7feb93409dbe18ee3e13223adf0244e73746c3a6
- SHA512 fc00d174e54a3ab9e87b14441ebbb3524dc539355476a314711f1e7b89918efea054b07ab3ed394e65e0cd30fa93eb119336278f385c30d1811ff372ad1cc609
- SSDEEP 24576:Na1Dd70iTWCCJdlXbKL8fHz0/LPRRPUoIyke9b:kDd79WCCJz+gf4/LPRxBke1
- TLSH T1DF25E01177E0C136F1B368768A7F9734552C78715F6886CFA388166E4DB06E1EA30B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1