2026-11-01_e02eff6d0edc20e2b69fb803c18bac10_elex_rhadamanthys_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_e02eff6d0edc20e2b69fb803c18bac10_elex_rhadamanthys_stop
Size 22.2MB
Sample261102-grthtafs2z
SHA256 5c8626509d72505fd4d0532d046cd2015c5d0da92994da30259c95361ded35ec
MD5 e02eff6d0edc20e2b69fb803c18bac10
SHA1 2550e73cfc7c51614a287559a3c5bcc68eb7d6ee
SHA512 3eb55aa7535ff2650f7d73adb5eed2311156d4f2b91fbab26bbb0d627ea6c521eb3f0bfcd9fa16360a9738bec69f1e634669a63c2ac4d6c59f8790a47050b4f0
SSDEEP 393216:X/jvySbl6tu/OeM6JIs9x2C6Lu5fIEIecLQUTwJ27h3kFL5qeREybIiv8FH+dZFF:rvySb002SIi2Xq5Eec3wgKqwk5H+TFSE
TLSH
T18B37334874ED1A21D28BB63554F98681E8367E02257AED6BFB4C0B21B31C0F79F750B6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-11-01_e02eff6d0edc20e2b69fb803c18bac10_elex_rhadamanthys_stop

File Explorer

2026-11-01_e02eff6d0edc20e2b69fb803c18bac10_elex_rhadamanthys_stop

.exe 22.2MB

2026-11-01_e02eff6d0edc20e2b69fb803c18bac10_elex_rhadamanthys_stop

IMPHASH 854c336ac5ca4c481669547aa2d2a66f
SHA256 5c8626509d72505fd4d0532d046cd2015c5d0da92994da30259c95361ded35ec
MD5 e02eff6d0edc20e2b69fb803c18bac10
SHA1 2550e73cfc7c51614a287559a3c5bcc68eb7d6ee
SHA512 3eb55aa7535ff2650f7d73adb5eed2311156d4f2b91fbab26bbb0d627ea6c521eb3f0bfcd9fa16360a9738bec69f1e634669a63c2ac4d6c59f8790a47050b4f0
SSDEEP 393216:X/jvySbl6tu/OeM6JIs9x2C6Lu5fIEIecLQUTwJ27h3kFL5qeREybIiv8FH+dZFF:rvySb002SIi2Xq5Eec3wgKqwk5H+TFSE
TLSH
T18B37334874ED1A21D28BB63554F98681E8367E02257AED6BFB4C0B21B31C0F79F750B6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

34:95:7c:db:9a:69:74:36:e3:1c:07:0e:ba:63:99:ce:09:8d:e6:66

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Continental Automotive GmbH,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Continental Automotive GmbH,L=Villingen-Schwenningen,ST=Baden-Wuerttemberg,C=DE

Chains

Oct 26, 2026

CN=Continental Automotive GmbH,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Continental Automotive GmbH,L=Villingen-Schwenningen,ST=Baden-Wuerttemberg,C=DE

Minor OS version

Major OS version

Entry point

32440

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

SHGetPathFromIDListA SHGetSpecialFolderLocation ShellExecuteExA SHGetMalloc

user32

BeginPaint GetSysColor GetClientRect SetRect EndPaint LoadCursorA GetLastActivePopup ShowWindow PostMessageA SendMessageA EnableWindow GetTopWindow SetWindowLongA GetWindowLongA SetWindowTextA SetForegroundWindow SetActiveWindow SetDlgItemTextA CharUpperBuffA LoadIconA SetWindowWord SendDlgItemMessageA GetDlgItem InvalidateRect UpdateWindow LoadStringA MessageBoxA SetTimer GetMessageA KillTimer PostQuitMessage DialogBoxParamA GetDlgItemTextA EndDialog GetWindowRect GetSystemMetrics SetWindowPos PeekMessageA TranslateMessage DispatchMessageA SetCursor CharNextA GetWindowWord DefWindowProcA RegisterClassA GetParent

kernel32

InitializeCriticalSection LoadLibraryA GetLocaleInfoA Sleep EnterCriticalSection LeaveCriticalSection GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter VirtualFree HeapCreate HeapDestroy DeleteCriticalSection GetFileType SetHandleCount GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStdHandle GetCurrentThreadId GetVersionExA FindClose FindFirstFileA SetCurrentDirectoryA CreateDirectoryA SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime VirtualAlloc GetDriveTypeA GetEnvironmentVariableA DeleteFileA SetFileAttributesA RemoveDirectoryA SetEndOfFile SetFilePointer CloseHandle UnmapViewOfFile MapViewOfFile CreateFileMappingA GetFileSize CreateFileA GetWindowsDirectoryA MoveFileExA _lclose OpenFile GlobalFree GlobalUnlock GlobalHandle _llseek _lread _lopen GlobalLock GlobalAlloc GlobalMemoryStatus GetVersion GetModuleFileNameA WriteFile GetSystemTime CreateProcessA lstrlenA LocalFree ExitProcess GetModuleHandleA _lcreat GetVolumeInformationA GetTickCount FormatMessageA GetLastError WinExec _lwrite WaitForSingleObject SetErrorMode HeapReAlloc GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers LocalAlloc FindNextFileA RtlUnwind GetCommandLineA HeapFree HeapAlloc GetProcessHeap GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError

gdi32

SetTextColor SetTextAlign GetBkColor GetTextExtentPoint32A ExtTextOutA CreateDCA GetDeviceCaps CreateFontIndirectA DeleteDC SelectObject DeleteObject SetBkColor

comctl32

ord17

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_e02eff6d0edc20e2b69fb803c18bac10_elex_rhadamanthys_stop

PE Signature issue

shell32

user32

kernel32

gdi32

comctl32

generic