General
- Target 2026-11-02_c97610fd980fef04a6c83949e38f2737_elex_rhadamanthys_stop_tofsee
- Size 1.5MB
- Sample261102-2rn9badw7z
- SHA256 31cd03bec204e5e2c05c026b163133366c205ab21966c4cb01cf5a335bbfcfde
- MD5 c97610fd980fef04a6c83949e38f2737
- SHA1 1a959cde8085ad6dc8ee5fe16c89e029ac078e2e
- SHA512 6ff36f78abb0dfc96b72fc543644abd37674088e9791347baea2684e5787912f440da44655941f3f05b7e33be24e4900a4e206eaae074a214cc2f9fcdfe17d9e
- SSDEEP 12288:yeoISzcQeTD2MG+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpG7:yeomdTqMGyxknw4FYnshx8OfVe247
- TLSH T17C75012472C1C0B3C02714734675C3F16A6B78B59A75A64BEBCB6BBD8F304D1E62934A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_c97610fd980fef04a6c83949e38f2737_elex_rhadamanthys_stop_tofsee.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_c97610fd980fef04a6c83949e38f2737_elex_rhadamanthys_stop_tofsee
- Size 1.5MB
- SHA256 31cd03bec204e5e2c05c026b163133366c205ab21966c4cb01cf5a335bbfcfde
- MD5 c97610fd980fef04a6c83949e38f2737
- SHA1 1a959cde8085ad6dc8ee5fe16c89e029ac078e2e
- SHA512 6ff36f78abb0dfc96b72fc543644abd37674088e9791347baea2684e5787912f440da44655941f3f05b7e33be24e4900a4e206eaae074a214cc2f9fcdfe17d9e
- SSDEEP 12288:yeoISzcQeTD2MG+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpG7:yeomdTqMGyxknw4FYnshx8OfVe247
- TLSH T17C75012472C1C0B3C02714734675C3F16A6B78B59A75A64BEBCB6BBD8F304D1E62934A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1