2026-07-08_82bca90fb61c08f5f18705363cb0ce06_elex_mafia_rhadamanthys_stealc_tofsee

General

Target
2026-07-08_82bca90fb61c08f5f18705363cb0ce06_elex_mafia_rhadamanthys_stealc_tofsee
Size 1.6MB
Sample260708-kdts7set8l
SHA256 313f925b54911e8ad7f152db7c8e942c8a9c626786a5affb801437e33acd8da7
MD5 82bca90fb61c08f5f18705363cb0ce06
SHA1 f277e75f5e59d6ab23b9ded7af0ede90c7e7c3cb
SHA512 650d303c2cb3217bacdc663e6f8ea12a6ed7ac494f3368ed7e6c6c0fdb04746625402fec8c1c9ab5efa52fe4c4272d9b84b15ea2a4a361d38b96f955ee622ee0
SSDEEP 12288:0/H03qWxsbXgSiY/Hf7oOyZakKLcDW4r7X71QYy2dx3T+sLhHm:0/H0J+gSRH7I4kKAl1Q32dxD+sdHm
TLSH
T11B7501203984C033D567123489F6C3799A3AFCA507A490DB77E4EFF97E782D15A38259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_82bca90fb61c08f5f18705363cb0ce06_elex_mafia_rhadamanthys_stealc_tofsee

File Explorer

2026-07-08_82bca90fb61c08f5f18705363cb0ce06_elex_mafia_rhadamanthys_stealc_tofsee

.exe 1.6MB

2026-07-08_82bca90fb61c08f5f18705363cb0ce06_elex_mafia_rhadamanthys_stealc_tofsee

IMPHASH f0b8cea6b61ce558f22f9cf303a07d24
SHA256 313f925b54911e8ad7f152db7c8e942c8a9c626786a5affb801437e33acd8da7
MD5 82bca90fb61c08f5f18705363cb0ce06
SHA1 f277e75f5e59d6ab23b9ded7af0ede90c7e7c3cb
SHA512 650d303c2cb3217bacdc663e6f8ea12a6ed7ac494f3368ed7e6c6c0fdb04746625402fec8c1c9ab5efa52fe4c4272d9b84b15ea2a4a361d38b96f955ee622ee0
SSDEEP 12288:0/H03qWxsbXgSiY/Hf7oOyZakKLcDW4r7X71QYy2dx3T+sLhHm:0/H0J+gSRH7I4kKAl1Q32dxD+sdHm
TLSH
T11B7501203984C033D567123489F6C3799A3AFCA507A490DB77E4EFF97E782D15A38259
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

61348

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\HUDSON\workspace\Autoupdate2.1-update\obj\jaureg\Release\jaureg.pdb

kernel32

SetDllDirectoryA SetLastError CreateProcessA CreateDirectoryA GetCommandLineA lstrcmpA LocalFree CreateMutexA WaitForSingleObject GetExitCodeProcess GlobalAlloc InitializeCriticalSection IsValidLocale GetLastError GetSystemDirectoryA CloseHandle lstrlenA WriteFile SetFilePointer CreateFileA lstrcatA GetTempPathA lstrcmpiA GetEnvironmentVariableA EnumSystemLocalesA GetLocaleInfoA GetSystemTimeAsFileTime HeapFree GetProcAddress GetModuleHandleW ExitProcess DecodePointer EnterCriticalSection LeaveCriticalSection FindClose FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileExA HeapAlloc HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer WideCharToMultiByte GetTimeZoneInformation Sleep TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement IsProcessorFeaturePresent RaiseException HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection InterlockedExchange LoadLibraryW GetLocaleInfoW GetModuleFileNameW GetConsoleCP GetConsoleMode ReadFile FlushFileBuffers GetFullPathNameA GetFileInformationByHandle PeekNamedPipe GetCurrentDirectoryW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetCPInfo HeapReAlloc GetACP GetOEMCP IsValidCodePage RtlUnwind HeapSize MultiByteToWideChar WriteConsoleW SetStdHandle GetDriveTypeW SetEndOfFile GetProcessHeap LCMapStringW GetStringTypeW CreateFileW CompareStringW SetEnvironmentVariableA GetUserDefaultLCID

user32

wsprintfA

advapi32

RegDeleteValueA RegCloseKey RegEnumKeyA RegQueryInfoKeyA RegOpenKeyExA RegSetValueExA

shell32

SHGetFolderPathA

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_82bca90fb61c08f5f18705363cb0ce06_elex_mafia_rhadamanthys_stealc_tofsee

kernel32

user32

advapi32

shell32

generic