2026-11-01_ddff6d6738e86b175df529ced4655c2e_elex_http-browser_rhadamanthys_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_ddff6d6738e86b175df529ced4655c2e_elex_http-browser_rhadamanthys_stop
Size 22.2MB
Sample261102-g3rhlaec86
SHA256 9c56028bd45c4017f456af63deb26240b6362e9cd4fed80280b9805b5e02ed63
MD5 ddff6d6738e86b175df529ced4655c2e
SHA1 3f37dabf8b094af8d41d5a9b61c253e95c3cd6e8
SHA512 3bc14d3df8e386c9495165af1c8b075f181d221d5246274bd84b1c7bbda46642f051034f7b669a8261412e6e28039d0926ee4663427bcafe6c5733770f1ea8a6
SSDEEP 393216:ozVytNrLrj7pG/OPoTH4xUbuPpuM+3LWTYTx87XlbYIlHvO5VxBjW1it12/:YUNzj7SH4xXEM+bWtJbY0O5Vq1it8
TLSH
T15A37336B74E458BCD2595D3D2D625AEFCF92BE32001918B7B581674C0B8FB8E0A3C725
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_ddff6d6738e86b175df529ced4655c2e_elex_http-browser_rhadamanthys_stop

File Explorer

2026-11-01_ddff6d6738e86b175df529ced4655c2e_elex_http-browser_rhadamanthys_stop

.exe 22.2MB

2026-11-01_ddff6d6738e86b175df529ced4655c2e_elex_http-browser_rhadamanthys_stop

IMPHASH 9df0b28156cd22b0edefe1e95b4e98a2
SHA256 9c56028bd45c4017f456af63deb26240b6362e9cd4fed80280b9805b5e02ed63
MD5 ddff6d6738e86b175df529ced4655c2e
SHA1 3f37dabf8b094af8d41d5a9b61c253e95c3cd6e8
SHA512 3bc14d3df8e386c9495165af1c8b075f181d221d5246274bd84b1c7bbda46642f051034f7b669a8261412e6e28039d0926ee4663427bcafe6c5733770f1ea8a6
SSDEEP 393216:ozVytNrLrj7pG/OPoTH4xUbuPpuM+3LWTYTx87XlbYIlHvO5VxBjW1it12/:YUNzj7SH4xXEM+bWtJbY0O5Vq1it8
TLSH
T15A37336B74E458BCD2595D3D2D625AEFCF92BE32001918B7B581674C0B8FB8E0A3C725
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32440

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

gdi32

SetTextColor SetTextAlign GetBkColor GetTextExtentPoint32A ExtTextOutA CreateDCA GetDeviceCaps CreateFontIndirectA DeleteDC SelectObject DeleteObject SetBkColor

kernel32

InitializeCriticalSection LoadLibraryA GetLocaleInfoA Sleep EnterCriticalSection LeaveCriticalSection GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter VirtualFree HeapCreate HeapDestroy DeleteCriticalSection GetFileType SetHandleCount GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStdHandle GetCurrentThreadId GetVersionExA FindClose FindFirstFileA SetCurrentDirectoryA CreateDirectoryA SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime VirtualAlloc GetDriveTypeA GetEnvironmentVariableA DeleteFileA SetFileAttributesA RemoveDirectoryA SetEndOfFile SetFilePointer CloseHandle UnmapViewOfFile MapViewOfFile CreateFileMappingA GetFileSize CreateFileA GetWindowsDirectoryA MoveFileExA _lclose OpenFile GlobalFree GlobalUnlock GlobalHandle _llseek _lread _lopen GlobalLock GlobalAlloc GlobalMemoryStatus GetVersion GetModuleFileNameA WriteFile GetSystemTime CreateProcessA lstrlenA LocalFree ExitProcess GetModuleHandleA _lcreat GetVolumeInformationA GetTickCount FormatMessageA GetLastError WinExec _lwrite WaitForSingleObject SetErrorMode HeapReAlloc GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers LocalAlloc FindNextFileA RtlUnwind GetCommandLineA HeapFree HeapAlloc GetProcessHeap GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionAndSpinCount GetCurrentProcess SetHandleCount RtlRestoreContext SetHandleCount CloseHandle CloseHandle CloseHandle

shell32

SHGetPathFromIDListA SHGetSpecialFolderLocation ShellExecuteExA SHGetMalloc

user32

BeginPaint GetSysColor GetClientRect SetRect EndPaint LoadCursorA GetLastActivePopup ShowWindow PostMessageA SendMessageA EnableWindow GetTopWindow SetWindowLongA GetWindowLongA SetWindowTextA SetForegroundWindow SetActiveWindow SetDlgItemTextA CharUpperBuffA LoadIconA SetWindowWord SendDlgItemMessageA GetDlgItem InvalidateRect UpdateWindow LoadStringA MessageBoxA SetTimer GetMessageA KillTimer PostQuitMessage DialogBoxParamA GetDlgItemTextA EndDialog GetWindowRect GetSystemMetrics SetWindowPos PeekMessageA TranslateMessage DispatchMessageA SetCursor CharNextA GetWindowWord DefWindowProcA RegisterClassA GetParent

Name

.text

Size

60KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

28KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_winzip_

Size

21.9MB

Virtual Size

21.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_ddff6d6738e86b175df529ced4655c2e_elex_http-browser_rhadamanthys_stop

comctl32

gdi32

kernel32

shell32

user32

generic