General
- Target 2026-09-04_27c6c82ced091ba984a486ab4c2ed9ce_elex_rhadamanthys_stop
- Size 992KB
- Sample260905-tfc3xaxgmd
- SHA256 23ae20f7a227b63c3bb741633f467f65610d5c7629d4159fdb387a827a7c4e1f
- MD5 27c6c82ced091ba984a486ab4c2ed9ce
- SHA1 118721d0ddf5b29a6c496cb56918b6d5d42db1db
- SHA512 5aa5081c2d7be9a91f8985064f7c2b65a68e2c516290320244126ffd3395fa6f01eeb2c69391b6fd5eb5a3f9b008266f617cda95b9e90ce73aaa827adde92908
- SSDEEP 12288:3E0wIk0BX3RK0emGd70ioGuVWW6oICz1X1N7VVF5dWDzL6wgSUR4EU/jjRIxWiUB:3E1Dd70iTWCCX11Z6DgSURgpEWLPTem
- TLSH T16225F11037D18039F1B328378A7FE728556DB8715F6946CFA388166E5E706E1EA30B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_27c6c82ced091ba984a486ab4c2ed9ce_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_27c6c82ced091ba984a486ab4c2ed9ce_elex_rhadamanthys_stop
- Size 992KB
- SHA256 23ae20f7a227b63c3bb741633f467f65610d5c7629d4159fdb387a827a7c4e1f
- MD5 27c6c82ced091ba984a486ab4c2ed9ce
- SHA1 118721d0ddf5b29a6c496cb56918b6d5d42db1db
- SHA512 5aa5081c2d7be9a91f8985064f7c2b65a68e2c516290320244126ffd3395fa6f01eeb2c69391b6fd5eb5a3f9b008266f617cda95b9e90ce73aaa827adde92908
- SSDEEP 12288:3E0wIk0BX3RK0emGd70ioGuVWW6oICz1X1N7VVF5dWDzL6wgSUR4EU/jjRIxWiUB:3E1Dd70iTWCCX11Z6DgSURgpEWLPTem
- TLSH T16225F11037D18039F1B328378A7FE728556DB8715F6946CFA388166E5E706E1EA30B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1