2026-11-01_c3e97dea8cc485c06b18ac16135bf3c9_elex_rhadamanthys_stop

General

Target
2026-11-01_c3e97dea8cc485c06b18ac16135bf3c9_elex_rhadamanthys_stop
Size 863KB
Sample261102-lb7sqaef59
SHA256 612677db044dc50c6b3058818b5432b0e6f881ca0f83d755ead02471d0413305
MD5 c3e97dea8cc485c06b18ac16135bf3c9
SHA1 24ead020605a0a447afd9918ee1f55eae84b6f84
SHA512 57a5b571c760cde56a9d2bd5c512cddb1148eb7302fc14744c2870f1e97c78077bb616df7af1cbf65bdbe50ef3aad77bb0900d8e751ccc1d61dc310d59f25d7f
SSDEEP 24576:U0En+MfddyakgXAs7pzv+SiA7+tuep9p:UxrfdigXAqie+Pj
TLSH
T15E15124672E0C071E0B217334838C6B66A27F9557E3ACDDB5688655E0BB35D09C38BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_c3e97dea8cc485c06b18ac16135bf3c9_elex_rhadamanthys_stop

File Explorer

2026-11-01_c3e97dea8cc485c06b18ac16135bf3c9_elex_rhadamanthys_stop

.exe 863KB

2026-11-01_c3e97dea8cc485c06b18ac16135bf3c9_elex_rhadamanthys_stop

IMPHASH 528d13fac8436cf12a80a4a4914fbe51
SHA256 612677db044dc50c6b3058818b5432b0e6f881ca0f83d755ead02471d0413305
MD5 c3e97dea8cc485c06b18ac16135bf3c9
SHA1 24ead020605a0a447afd9918ee1f55eae84b6f84
SHA512 57a5b571c760cde56a9d2bd5c512cddb1148eb7302fc14744c2870f1e97c78077bb616df7af1cbf65bdbe50ef3aad77bb0900d8e751ccc1d61dc310d59f25d7f
SSDEEP 24576:U0En+MfddyakgXAs7pzv+SiA7+tuep9p:UxrfdigXAqie+Pj
TLSH
T15E15124672E0C071E0B217334838C6B66A27F9557E3ACDDB5688655E0BB35D09C38BB7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

43797

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathCombineA PathRemoveFileSpecW PathRemoveFileSpecA

kernel32

UnhandledExceptionFilter CreateFileA WriteFile FileTimeToLocalFileTime SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetLocaleInfoW HeapFree GetProcessHeap GetModuleFileNameA WritePrivateProfileStringA MultiByteToWideChar GetPrivateProfileStringA HeapAlloc WriteConsoleW WideCharToMultiByte SetConsoleTextAttribute ExitProcess GetStdHandle WriteConsoleOutputW Sleep GetTickCount CloseHandle CreateFileW ReadConsoleInputW PeekConsoleInputW SetConsoleCursorPosition FreeLibrary WaitForSingleObject OpenProcess DeleteFileA GetFullPathNameW GetCommandLineW GetProcAddress LoadLibraryA GetModuleHandleW GetConsoleScreenBufferInfo GetConsoleMode GetConsoleCP HeapSize FlushFileBuffers GetConsoleOutputCP WriteConsoleA SetStdHandle HeapReAlloc VirtualAlloc InitializeCriticalSection GetLocaleInfoA GetCommandLineA GetVersionExA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetLastError LCMapStringA LCMapStringW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer RtlUnwind GetStringTypeA GetStringTypeW

user32

GetWindowThreadProcessId PeekMessageW GetMessageW TranslateMessage DispatchMessageW CreateWindowExW DefWindowProcW FindWindowW PostQuitMessage SendMessageW wsprintfW RegisterClassExW GetClassInfoExW WaitMessage

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_c3e97dea8cc485c06b18ac16135bf3c9_elex_rhadamanthys_stop

shlwapi

kernel32

user32

generic