2026-10-08_3b43deca88dd10adc140baa8d80fd36a_elex_rhadamanthys_stop

General

Target
2026-10-08_3b43deca88dd10adc140baa8d80fd36a_elex_rhadamanthys_stop
Size 68KB
Sample261009-vfhttscg65
SHA256 80e82062f1edbbdf87d841dd6773d95ddbd9bc44a8afa01bed4a6f7dbdad7480
MD5 3b43deca88dd10adc140baa8d80fd36a
SHA1 17554d46c336bffcf033463f5c12d9f672b29482
SHA512 5fb2b272130ec701f1d3110b0031d2dfa87c16f4931b1e945d5711182d578c20109bf2b6858e67115e28c8138b7694b87a74da6851de1ab4794c469d9f301db7
SSDEEP 768:E66GvbpdFbBEM32sZNKCzgZrBqe/m9MgbtDzKvGPnGM/5gw4zZ6/vXvi:E6/b71BE2Nlz3eHetDvfGFZwq
TLSH
T1DF636B0A3C53C433E4024DB986D581D55FFF2C033AE3A07FEF8515895EB12985AAAAF5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-08_3b43deca88dd10adc140baa8d80fd36a_elex_rhadamanthys_stop

File Explorer

2026-10-08_3b43deca88dd10adc140baa8d80fd36a_elex_rhadamanthys_stop

.exe 68KB

2026-10-08_3b43deca88dd10adc140baa8d80fd36a_elex_rhadamanthys_stop

IMPHASH 3287ae3049dfceb8e79cc02378852512
SHA256 80e82062f1edbbdf87d841dd6773d95ddbd9bc44a8afa01bed4a6f7dbdad7480
MD5 3b43deca88dd10adc140baa8d80fd36a
SHA1 17554d46c336bffcf033463f5c12d9f672b29482
SHA512 5fb2b272130ec701f1d3110b0031d2dfa87c16f4931b1e945d5711182d578c20109bf2b6858e67115e28c8138b7694b87a74da6851de1ab4794c469d9f301db7
SSDEEP 768:E66GvbpdFbBEM32sZNKCzgZrBqe/m9MgbtDzKvGPnGM/5gw4zZ6/vXvi:E6/b71BE2Nlz3eHetDvfGFZwq
TLSH
T1DF636B0A3C53C433E4024DB986D581D55FFF2C033AE3A07FEF8515895EB12985AAAAF5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5321

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameW GlobalAlloc CreateFileW ReadFile CreateHardLinkW ExitProcess LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetProcAddress GetModuleHandleA WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA MultiByteToWideChar GetEnvironmentStrings FreeEnvironmentStringsW GetLastError GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSection Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc RtlUnwind HeapSize GetLocaleInfoA WideCharToMultiByte

user32

CreateWindowExW RegisterClassW DefWindowProcW LoadIconW GetQueueStatus ShowWindow

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-08_3b43deca88dd10adc140baa8d80fd36a_elex_rhadamanthys_stop

kernel32

user32

generic