2026-11-02_c2cf6b5aceaa15f6e35ea945d999e36f_elex_karagany_rhadamanthys_stop

General

Target
2026-11-02_c2cf6b5aceaa15f6e35ea945d999e36f_elex_karagany_rhadamanthys_stop
Size 1.2MB
Sample261102-3g2mbsge63
SHA256 e866682e7664ef9f3ac41e09da9c7817d23c8b91def7a43d729b1b30561281bd
MD5 c2cf6b5aceaa15f6e35ea945d999e36f
SHA1 0a500d4af4640e4e28b836a8daff20526f2693e1
SHA512 060a0d783560542e8bebb7a21ad5c67608191a0f386640946221923fc6756b49bdd8bdf32d8cc57c0f3c6b5fa064592c3f52891bf2398b0bfe66f1d66ad89294
SSDEEP 12288:glJNTpWSgN/wwRN0UL0G/TVOo3HC75nSE33b9YvFH:cdCN/j2GLl3iFSE33b9
TLSH
T15C552321BAE1E036E07B437406B8DB225715FEF0DA74844357C41ADF6A78BE49D362A3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-02_c2cf6b5aceaa15f6e35ea945d999e36f_elex_karagany_rhadamanthys_stop

File Explorer

2026-11-02_c2cf6b5aceaa15f6e35ea945d999e36f_elex_karagany_rhadamanthys_stop

.exe 1.2MB

2026-11-02_c2cf6b5aceaa15f6e35ea945d999e36f_elex_karagany_rhadamanthys_stop

IMPHASH a340e1f20854ade539b60f8d4d7110eb
SHA256 e866682e7664ef9f3ac41e09da9c7817d23c8b91def7a43d729b1b30561281bd
MD5 c2cf6b5aceaa15f6e35ea945d999e36f
SHA1 0a500d4af4640e4e28b836a8daff20526f2693e1
SHA512 060a0d783560542e8bebb7a21ad5c67608191a0f386640946221923fc6756b49bdd8bdf32d8cc57c0f3c6b5fa064592c3f52891bf2398b0bfe66f1d66ad89294
SSDEEP 12288:glJNTpWSgN/wwRN0UL0G/TVOo3HC75nSE33b9YvFH:cdCN/j2GLl3iFSE33b9
TLSH
T15C552321BAE1E036E07B437406B8DB225715FEF0DA74844357C41ADF6A78BE49D362A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5871

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Temp\CreateRtkToastLnk - Copy - Copy\Release\CreateRtkToastLnk.pdb

shlwapi

SHStrDupW

kernel32

InitOnceExecuteOnce CreateFileW GetEnvironmentVariableW GetFileAttributesW CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineW UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetStartupInfoW GetModuleHandleW GetProcAddress EncodePointer DecodePointer GetLastError SetLastError InterlockedIncrement InterlockedDecrement GetCurrentThreadId ExitProcess GetModuleHandleExW MultiByteToWideChar GetStdHandle WriteFile GetModuleFileNameW GetProcessHeap GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection RaiseException QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW EnterCriticalSection LeaveCriticalSection HeapFree Sleep IsValidCodePage GetACP GetOEMCP GetCPInfo LoadLibraryExW OutputDebugStringW LoadLibraryW RtlUnwind HeapAlloc HeapReAlloc WideCharToMultiByte GetStringTypeW HeapSize LCMapStringEx FlushFileBuffers GetConsoleCP

ole32

PropVariantClear CoCreateInstance CoInitialize CoUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-02_c2cf6b5aceaa15f6e35ea945d999e36f_elex_karagany_rhadamanthys_stop

shlwapi

kernel32

ole32

generic