General
- Target 2026-10-01_5aa417981afd471dfd85da58208d3639_elex_remcos_rhadamanthys_stop
- Size 2.0MB
- Sample261003-zdq5msxane
- SHA256 2d40ff2c47138020f4e811f58a338751d780fd4cf5985183a3e66fcc84381e4b
- MD5 5aa417981afd471dfd85da58208d3639
- SHA1 7312d9e5ac97ee6bc976bac8ddcbd98788fde595
- SHA512 153b23b1ee405cacb0b26ef03c870e17dd450691f02af76d179a4ce2f840af8aaf159ee1ab0917a1e1120bc476a1cf0a6e930028737047f9bfb5e5890df2381e
- SSDEEP 49152:x0NkOLnVrqFXvqN56fILJTajXF3cXAERE8EEEiEEE6EEEYEEE/EEEvEEEsrgh+1U:x0NVrky56fgYjXF3cXAERE8EEEiEEE6f
- TLSH T168A53B50A1015326E1FF00B16CAB5CFA9E146E61076812C79FCCBB791FB2EDB567A40B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_5aa417981afd471dfd85da58208d3639_elex_remcos_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_5aa417981afd471dfd85da58208d3639_elex_remcos_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_5aa417981afd471dfd85da58208d3639_elex_remcos_rhadamanthys_stop
- Size 2.0MB
- SHA256 2d40ff2c47138020f4e811f58a338751d780fd4cf5985183a3e66fcc84381e4b
- MD5 5aa417981afd471dfd85da58208d3639
- SHA1 7312d9e5ac97ee6bc976bac8ddcbd98788fde595
- SHA512 153b23b1ee405cacb0b26ef03c870e17dd450691f02af76d179a4ce2f840af8aaf159ee1ab0917a1e1120bc476a1cf0a6e930028737047f9bfb5e5890df2381e
- SSDEEP 49152:x0NkOLnVrqFXvqN56fILJTajXF3cXAERE8EEEiEEE6EEEYEEE/EEEvEEEsrgh+1U:x0NVrky56fgYjXF3cXAERE8EEEiEEE6f
- TLSH T168A53B50A1015326E1FF00B16CAB5CFA9E146E61076812C79FCCBB791FB2EDB567A40B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory