General
- Target 2026-09-04_3ebd01f379b1c5c7bb1b6502496ddcc8_elex_rhadamanthys_stop
- Size 996KB
- Sample260905-qlzmbaeb25
- SHA256 6649db8a90eb2a89c95e09b2c4b7ac1e7dae7380579f9656f6f5a0e2e1bb9ca1
- MD5 3ebd01f379b1c5c7bb1b6502496ddcc8
- SHA1 1ee20e73d75f9dcfce4f30b030ac811f28499248
- SHA512 5eb675a80f625d57236e47ec0aacccb742a8975b94c223e5a01fc35aa72288766bf994ec83f3be4338f7a507d2d55e7868536921e03f00b5b2daad3727cd1429
- SSDEEP 24576:ka1Dd70iTWCWILD8F8tEi5klhtKrLlzb6cd:xDd79WCWIfHSa9fla2
- TLSH T14125F11137D0C135F5B328368A7FA734552DB8611FA982CFE388166E5E706E1E631B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_3ebd01f379b1c5c7bb1b6502496ddcc8_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_3ebd01f379b1c5c7bb1b6502496ddcc8_elex_rhadamanthys_stop
- Size 996KB
- SHA256 6649db8a90eb2a89c95e09b2c4b7ac1e7dae7380579f9656f6f5a0e2e1bb9ca1
- MD5 3ebd01f379b1c5c7bb1b6502496ddcc8
- SHA1 1ee20e73d75f9dcfce4f30b030ac811f28499248
- SHA512 5eb675a80f625d57236e47ec0aacccb742a8975b94c223e5a01fc35aa72288766bf994ec83f3be4338f7a507d2d55e7868536921e03f00b5b2daad3727cd1429
- SSDEEP 24576:ka1Dd70iTWCWILD8F8tEi5klhtKrLlzb6cd:xDd79WCWIfHSa9fla2
- TLSH T14125F11137D0C135F5B328368A7FA734552DB8611FA982CFE388166E5E706E1E631B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1