General
- Target 2026-09-04_1d23599971239637699cf6939d3a615e_elex_rhadamanthys_stop
- Size 996KB
- Sample260905-vhtdcafl3y
- SHA256 b70adcb88ec1acfc1f4df4d26c943a3572af9d69a013ecd932c277218b0481ac
- MD5 1d23599971239637699cf6939d3a615e
- SHA1 e6e6940a8dbe79700195a47866ac579339e38d3b
- SHA512 6e601ed8f9644a0db59fada2256cd6ff5ce472266b178288a825bf2e54ebdac14c2356fce3674d6e4ae97e87def533eeeb2ffe5931a8d0d62678126146415d9e
- SSDEEP 24576:ka1Dd70iTWCoILD8F8tEi5klhtKrLlzb6cd:xDd79WCoIfHSa9fla2
- TLSH T18425F11137D0C135F5B328368A7FA724552DB8711FA986CFE388166E1E706E1E631B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_1d23599971239637699cf6939d3a615e_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_1d23599971239637699cf6939d3a615e_elex_rhadamanthys_stop
- Size 996KB
- SHA256 b70adcb88ec1acfc1f4df4d26c943a3572af9d69a013ecd932c277218b0481ac
- MD5 1d23599971239637699cf6939d3a615e
- SHA1 e6e6940a8dbe79700195a47866ac579339e38d3b
- SHA512 6e601ed8f9644a0db59fada2256cd6ff5ce472266b178288a825bf2e54ebdac14c2356fce3674d6e4ae97e87def533eeeb2ffe5931a8d0d62678126146415d9e
- SSDEEP 24576:ka1Dd70iTWCoILD8F8tEi5klhtKrLlzb6cd:xDd79WCoIfHSa9fla2
- TLSH T18425F11137D0C135F5B328368A7FA724552DB8711FA986CFE388166E1E706E1E631B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1