6a13ae979a23010b55111175e598cb4f50b0c0edc8c781783ebc550d86842855

Analysis

max time kernel
150s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 23:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-11-13_c9b8827f31f5d78938937a5bd9ddec6b_elex_rhadamanthys_stop.exe
Size 101KB
Sample261113-227teagy3n
SHA256 6a13ae979a23010b55111175e598cb4f50b0c0edc8c781783ebc550d86842855
MD5 c9b8827f31f5d78938937a5bd9ddec6b
SHA1 c6b52dff18b6fcd50d689f29ec455009c3797e95
SHA512 c3890c8cc0d08ce19c799665aee705bedd661afa2f9aa3b189d7bb1431ec149b46fca51b70b5a2695950d2d0a7571bd0570b0f421a3317c6fb602d74fb70190c
SSDEEP 1536:nwjDPsyogaDv2BQX2LuW8Lh9096CclLVeVWZtAAao9b0JthdZ87xT1+f:niPsRJ/e6C+LoVOtAEbgZgE
TLSH
T161A38C133560C072C89982724857C753AF36FD519FB8C8433BD97B8EAD743D29A2B295
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-11-13_c9b8827f31f5d78938937a5bd9ddec6b_elex_rhadamanthys_stop.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4120	2026-11-13_c9b8827f31f5d78938937a5bd9ddec6b_elex_rhadamanthys_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-13_c9b8827f31f5d78938937a5bd9ddec6b_elex_rhadamanthys_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-13_c9b8827f31f5d78938937a5bd9ddec6b_elex_rhadamanthys_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
PID:4120

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads