2026-09-16_b238036044a154e2d95dbabfd5d45c77_elex_karagany_rhadamanthys_stop

General

Target
2026-09-16_b238036044a154e2d95dbabfd5d45c77_elex_karagany_rhadamanthys_stop
Size 656KB
Sample260916-wj5cnstdjh
SHA256 8827169f48a551a9242d921faa8c41a7cadc226ccd8b8d1f72c626d1e582790e
MD5 b238036044a154e2d95dbabfd5d45c77
SHA1 7cdcc8b7121fdbc37f006c7c599823e436131e18
SHA512 8b541a657669edfa9f0128ba36a375127c23c1f0a66f7392c2779b64fff8cf6af7ced0d01c602f22c374a88f6732fe6acb69be6554aa674bd3800f3a428769df
SSDEEP 12288:bFcGkW99LzFGykBP0uGgvJsuEVA9853/5Q/vOOJf:yDWnkBP0uDJsuB25ve3NJf
TLSH
T156E47BC3B2048DC2C96831B2C9AEB76475352A63DF144782F796FAFE0AB57813437499
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_b238036044a154e2d95dbabfd5d45c77_elex_karagany_rhadamanthys_stop

File Explorer

2026-09-16_b238036044a154e2d95dbabfd5d45c77_elex_karagany_rhadamanthys_stop

.exe 656KB

2026-09-16_b238036044a154e2d95dbabfd5d45c77_elex_karagany_rhadamanthys_stop

IMPHASH 14d768f6df31e7e00493ce3dfa9c54f5
SHA256 8827169f48a551a9242d921faa8c41a7cadc226ccd8b8d1f72c626d1e582790e
MD5 b238036044a154e2d95dbabfd5d45c77
SHA1 7cdcc8b7121fdbc37f006c7c599823e436131e18
SHA512 8b541a657669edfa9f0128ba36a375127c23c1f0a66f7392c2779b64fff8cf6af7ced0d01c602f22c374a88f6732fe6acb69be6554aa674bd3800f3a428769df
SSDEEP 12288:bFcGkW99LzFGykBP0uGgvJsuEVA9853/5Q/vOOJf:yDWnkBP0uDJsuB25ve3NJf
TLSH
T156E47BC3B2048DC2C96831B2C9AEB76475352A63DF144782F796FAFE0AB57813437499
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

6

Entry point

18316

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

OneDrive.pdb

kernel32

FreeLibrary GetProcAddress LocalFree LoadLibraryW SetDllDirectoryW CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle GetCommandLineW EncodePointer DecodePointer RaiseException RtlUnwind GetLastError SetLastError InterlockedIncrement InterlockedDecrement GetCurrentThreadId ExitProcess GetModuleHandleExW MultiByteToWideChar GetStdHandle WriteFile GetModuleFileNameW GetProcessHeap GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection InitOnceExecuteOnce GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetModuleHandleW IsProcessorFeaturePresent HeapAlloc HeapFree HeapSize Sleep IsDebuggerPresent EnterCriticalSection LeaveCriticalSection IsValidCodePage GetACP GetOEMCP GetCPInfo LoadLibraryExW OutputDebugStringW WideCharToMultiByte LCMapStringEx HeapReAlloc GetStringTypeW FlushFileBuffers GetConsoleCP GetConsoleMode CreateFileW

shell32

CommandLineToArgvW

shlwapi

SHGetValueW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-16_b238036044a154e2d95dbabfd5d45c77_elex_karagany_rhadamanthys_stop

kernel32

shell32

shlwapi

generic