General
- Target 2026-09-04_4ad63e0920352d4c60524e21572d7007_elex_rhadamanthys_stop
- Size 992KB
- Sample260905-nt7a1szzfv
- SHA256 8de76f42a3e50c1721ff275e2635c65ce3d7c112c3910b7318a049aff1a57b78
- MD5 4ad63e0920352d4c60524e21572d7007
- SHA1 c988f92345205e46ab9330e2333b413f6841c010
- SHA512 38a864a0f57775caf8397207f400c19b12ca4a6f9d7a69a58bb8f8536822da7d3afa10f1ff769966edae165db16f4aee7fa11dc6ff22fb3f17fbd54dbfcd15c7
- SSDEEP 24576:OL1Dd70iTWCJjuBSHsu2UhowloNLQWozSk:gDd79WClJsu2UCSoN0vzSk
- TLSH T10725E01177D0C13AF5B328368ABFA724552DB8715F6982CFA3C8162E5D705E0EA31B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_4ad63e0920352d4c60524e21572d7007_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_4ad63e0920352d4c60524e21572d7007_elex_rhadamanthys_stop
- Size 992KB
- SHA256 8de76f42a3e50c1721ff275e2635c65ce3d7c112c3910b7318a049aff1a57b78
- MD5 4ad63e0920352d4c60524e21572d7007
- SHA1 c988f92345205e46ab9330e2333b413f6841c010
- SHA512 38a864a0f57775caf8397207f400c19b12ca4a6f9d7a69a58bb8f8536822da7d3afa10f1ff769966edae165db16f4aee7fa11dc6ff22fb3f17fbd54dbfcd15c7
- SSDEEP 24576:OL1Dd70iTWCJjuBSHsu2UhowloNLQWozSk:gDd79WClJsu2UCSoN0vzSk
- TLSH T10725E01177D0C13AF5B328368ABFA724552DB8715F6982CFA3C8162E5D705E0EA31B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1