2026-07-06_e8520bc4b3180bec3f1cc5dadd9e1fee_elex_redline-stealer_rhadamanthys_stop

General

Target
2026-07-06_e8520bc4b3180bec3f1cc5dadd9e1fee_elex_redline-stealer_rhadamanthys_stop
Size 1.4MB
Sample260706-r39paagv21
SHA256 cbb48f88bfc8e1c7589aee3311d70ffea849e0994eaf6a8a2c4d262fa48fbc68
MD5 e8520bc4b3180bec3f1cc5dadd9e1fee
SHA1 01c068d83f82347c784c6d9bb6e4e64bf22a69c8
SHA512 49735710ce8a3657076931629d3f50cb838174fa448500ef80343d62a47acdce99dd9dabbe576e4956d51cdfb3bdfd7abd687a38ad4603a4cc9a092da4274627
SSDEEP 12288:I55PAXruYyVHHaf4HJ1jwssawsUoN9PqI:85PiQnDJGaz9
TLSH
T1DB652362BA97C033E20A653A554CD222263DBEB13CB5D4437A9A3F7B6F303705A27117
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_e8520bc4b3180bec3f1cc5dadd9e1fee_elex_redline-stealer_rhadamanthys_stop

File Explorer

2026-07-06_e8520bc4b3180bec3f1cc5dadd9e1fee_elex_redline-stealer_rhadamanthys_stop

.exe 1.4MB

2026-07-06_e8520bc4b3180bec3f1cc5dadd9e1fee_elex_redline-stealer_rhadamanthys_stop

IMPHASH ba2c974ed567c90fe365844af978f320
SHA256 cbb48f88bfc8e1c7589aee3311d70ffea849e0994eaf6a8a2c4d262fa48fbc68
MD5 e8520bc4b3180bec3f1cc5dadd9e1fee
SHA1 01c068d83f82347c784c6d9bb6e4e64bf22a69c8
SHA512 49735710ce8a3657076931629d3f50cb838174fa448500ef80343d62a47acdce99dd9dabbe576e4956d51cdfb3bdfd7abd687a38ad4603a4cc9a092da4274627
SSDEEP 12288:I55PAXruYyVHHaf4HJ1jwssawsUoN9PqI:85PiQnDJGaz9
TLSH
T1DB652362BA97C033E20A653A554CD222263DBEB13CB5D4437A9A3F7B6F303705A27117
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9747

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GenerateConsoleCtrlEvent GetExitCodeProcess WaitForSingleObject CreateProcessA SetConsoleCtrlHandler GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep GetProcAddress ExitProcess GetCommandLineA GetStartupInfoA SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree HeapAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId WriteFile LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind HeapReAlloc VirtualAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA CompareStringA CompareStringW SetEnvironmentVariableA ReadFile SetEndOfFile GetProcessHeap GetFileAttributesA

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_e8520bc4b3180bec3f1cc5dadd9e1fee_elex_redline-stealer_rhadamanthys_stop

kernel32

generic