General
- Target 2026-09-30_c6c37a471b65d4552d2c68697b34ccb2_elex_icedid_rhadamanthys_stop
- Size 504KB
- Sample260930-js2lxsxvcs
- SHA256 a2ce2623498c965c17b48dc014fffd4d2b30fabf5860c0722c8a3527885f4702
- MD5 c6c37a471b65d4552d2c68697b34ccb2
- SHA1 a13a0dcd56af35627f75d653667149ed29c976a1
- SHA512 a5c17a3994b10932d4c90f76b6b689be1cef47046545d0286661933e5c9ae5c56ef62268825f48e9e6ae857952c906dfc4e001987891792cde3e5bacc98cf6fb
- SSDEEP 12288:n1O1UtF6dVWnxlMSn7nFKbltn+Ch/m6XF:n1dOiTAbD+OmeF
- TLSH T1C4B48C1137D0C036F1B329368A7FE734552DB8615F6882CFA3881B6E5E716E0AA3571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_c6c37a471b65d4552d2c68697b34ccb2_elex_icedid_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_c6c37a471b65d4552d2c68697b34ccb2_elex_icedid_rhadamanthys_stop
- Size 504KB
- SHA256 a2ce2623498c965c17b48dc014fffd4d2b30fabf5860c0722c8a3527885f4702
- MD5 c6c37a471b65d4552d2c68697b34ccb2
- SHA1 a13a0dcd56af35627f75d653667149ed29c976a1
- SHA512 a5c17a3994b10932d4c90f76b6b689be1cef47046545d0286661933e5c9ae5c56ef62268825f48e9e6ae857952c906dfc4e001987891792cde3e5bacc98cf6fb
- SSDEEP 12288:n1O1UtF6dVWnxlMSn7nFKbltn+Ch/m6XF:n1dOiTAbD+OmeF
- TLSH T1C4B48C1137D0C036F1B329368A7FE734552DB8615F6882CFA3881B6E5E716E0AA3571B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1