2026-07-29_524726468f73bf2e8f0777fed872a982_elex_floxif_manuscrypt_redline-stealer_rhadamanthys_stop

General

Target
2026-07-29_524726468f73bf2e8f0777fed872a982_elex_floxif_manuscrypt_redline-stealer_rhadamanthys_stop
Size 93KB
Sample260729-kcdetszaqc
SHA256 87778c4cdcb131eac6616cd01037ae82caa2bc703d116dfb6fcfb6e003c226e2
MD5 524726468f73bf2e8f0777fed872a982
SHA1 092e24b9ddc7453055b74cfcfe696ccd4c398e14
SHA512 20731308905d139f4a668d3ff9e6c69c39180386127db711e02f78d39ad93e2d15149587f941076812b25d54cb3e9d5aec1f8ca8f9351326e0365da8c3b9293c
SSDEEP 1536:zlpLa2V9HcDY6/ohgzFnszySjIU/R81KIOs1J7PUt:LL/88ySjT/R8sITfUt
TLSH
T11C934A057990C13BC4620031C836EAF55969BC39D56E8993B7DA3F2FBE313818B6935B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-29_524726468f73bf2e8f0777fed872a982_elex_floxif_manuscrypt_redline-stealer_rhadamanthys_stop

File Explorer

2026-07-29_524726468f73bf2e8f0777fed872a982_elex_floxif_manuscrypt_redline-stealer_rhadamanthys_stop

.exe 93KB

2026-07-29_524726468f73bf2e8f0777fed872a982_elex_floxif_manuscrypt_redline-stealer_rhadamanthys_stop

IMPHASH 7cd322a21a166e5f354457c41d1d9fb7
SHA256 87778c4cdcb131eac6616cd01037ae82caa2bc703d116dfb6fcfb6e003c226e2
MD5 524726468f73bf2e8f0777fed872a982
SHA1 092e24b9ddc7453055b74cfcfe696ccd4c398e14
SHA512 20731308905d139f4a668d3ff9e6c69c39180386127db711e02f78d39ad93e2d15149587f941076812b25d54cb3e9d5aec1f8ca8f9351326e0365da8c3b9293c
SSDEEP 1536:zlpLa2V9HcDY6/ohgzFnszySjIU/R81KIOs1J7PUt:LL/88ySjT/R8sITfUt
TLSH
T11C934A057990C13BC4620031C836EAF55969BC39D56E8993B7DA3F2FBE313818B6935B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

23418

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegDeleteValueW RegQueryValueExW RegOpenKeyExA RegCloseKey

user32

FindWindowA ShowWindow SetForegroundWindow CreateDialogParamA SetWindowTextA GetMessageA TranslateMessage DispatchMessageA wsprintfW DestroyWindow PostQuitMessage wsprintfA MessageBoxA SendMessageA

shell32

SHBrowseForFolderW SHGetPathFromIDListW

kernel32

LCMapStringW LCMapStringA GetStringTypeW MultiByteToWideChar GetStringTypeA GetLocaleInfoA GetDiskFreeSpaceW GetProcAddress GetModuleHandleA FreeLibrary LoadLibraryA GetCurrentProcess LocalFree lstrlenA CloseHandle WriteFile SetFilePointer CreateFileW FormatMessageA GetLastError CreateThread CreateProcessW GetModuleFileNameW GetExitCodeThread WaitForSingleObject CreateDirectoryW GetFileAttributesW GetTempPathW GetVersionExA ExitProcess CreateMutexA ExitThread MapViewOfFile SetFileTime GetFileTime CreateFileMappingA GetFileSize UnmapViewOfFile RtlUnwind HeapFree GetCommandLineA GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapAlloc RaiseException HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-29_524726468f73bf2e8f0777fed872a982_elex_floxif_manuscrypt_redline-stealer_rhadamanthys_stop

advapi32

user32

shell32

kernel32

generic