2026-10-22_9e20db865a22b11bdc25b02e8694ea80_elex_rhadamanthys_stop

General

Target
2026-10-22_9e20db865a22b11bdc25b02e8694ea80_elex_rhadamanthys_stop
Size 431KB
Sample261024-ddzacseb29
SHA256 9c6d3e787011b4b9d9291aa57f0449a4e3cf93fb8844cadfd297ac6662843c6e
MD5 9e20db865a22b11bdc25b02e8694ea80
SHA1 a62ba39b49758863b2c87bb35085bf9380111821
SHA512 cfc01f084b2ec3330f0bc838c2be9e5041a455916ab708a2c78edf762052bd417ccafc3ab4407cb43ebdc671eff3f943a73b3a88eed9fb0bee69cb4f3a199024
SSDEEP 6144:4VqKQ7cLLIa/TTBolKZAtt8di1LSjTGUlh4E9VmHktBr7:4VTQ7cPIa/TTJmEtBr7
TLSH
T1EA944DF83F56C569D83F94B0AAA4D2E817423C34DD05E35FB6587A2D62A108D93FE60C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_9e20db865a22b11bdc25b02e8694ea80_elex_rhadamanthys_stop

File Explorer

2026-10-22_9e20db865a22b11bdc25b02e8694ea80_elex_rhadamanthys_stop

.exe 431KB

2026-10-22_9e20db865a22b11bdc25b02e8694ea80_elex_rhadamanthys_stop

IMPHASH 43f866d5e87942f0c32d5274c0a5b83b
SHA256 9c6d3e787011b4b9d9291aa57f0449a4e3cf93fb8844cadfd297ac6662843c6e
MD5 9e20db865a22b11bdc25b02e8694ea80
SHA1 a62ba39b49758863b2c87bb35085bf9380111821
SHA512 cfc01f084b2ec3330f0bc838c2be9e5041a455916ab708a2c78edf762052bd417ccafc3ab4407cb43ebdc671eff3f943a73b3a88eed9fb0bee69cb4f3a199024
SSDEEP 6144:4VqKQ7cLLIa/TTBolKZAtt8di1LSjTGUlh4E9VmHktBr7:4VTQ7cPIa/TTJmEtBr7
TLSH
T1EA944DF83F56C569D83F94B0AAA4D2E817423C34DD05E35FB6587A2D62A108D93FE60C
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

27302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Build\SNSelfExtractor-SNSelfExtractor_2.0.1.0\Release\Data\SNSelfExtractor.pdb

kernel32

MultiByteToWideChar LoadResource LockResource SizeofResource FindResourceW FindResourceExW WideCharToMultiByte lstrlenW RaiseException GetLastError CloseHandle WaitForSingleObject GetModuleFileNameW CreateFileW GetFileSize ReadFile WriteFile SetFilePointer FlushFileBuffers GetTempPathW GetTempFileNameW DeleteFileW CreateFileMappingW UnmapViewOfFile MapViewOfFile SetFileTime SetFileAttributesW CreateDirectoryW FindFirstFileW FindNextFileW FindClose RemoveDirectoryW GetTickCount GetFileAttributesW Sleep LocalFree GetProcAddress FreeLibrary LoadLibraryW FormatMessageW SetDllDirectoryW SetCurrentDirectoryW ResumeThread InitializeCriticalSection CreateFileA WriteConsoleW LocalAlloc InterlockedExchange LoadLibraryA HeapFree ExitThread GetCurrentThreadId CreateThread GetModuleHandleW ExitProcess GetStartupInfoW HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapSize GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP GetProcessHeap

shlwapi

PathIsDirectoryW PathRemoveFileSpecW PathFileExistsW PathAppendW PathFindFileNameW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_9e20db865a22b11bdc25b02e8694ea80_elex_rhadamanthys_stop

kernel32

shlwapi

generic