2026-07-31_9314e0d1ae6ae923ab254b17ff0257c8_elex_redline-stealer_rhadamanthys_stop

General

Target
2026-07-31_9314e0d1ae6ae923ab254b17ff0257c8_elex_redline-stealer_rhadamanthys_stop
Size 1.4MB
Sample260731-dagwxascnd
SHA256 81c19e3d48345ca9e2d847681c66c78acd4685aff91eae8dc05f5f5550a7553c
MD5 9314e0d1ae6ae923ab254b17ff0257c8
SHA1 b15669d2d8772bfcaa342e7300a5f5e41c6fb147
SHA512 70c034317d61bb7b31234b539ef85451d84dbcdcd3a8816ef11d51c86da9cba16d2e3450b3f175b143e102ba682fb7baf107569eab911769608680ba101f531d
SSDEEP 12288:D6Xzmh5Lvsqm2bxjUbawK2XcMV8bsKn+oc0csQ4rYq2H82m:mXzmrLUB2bxjUW2sMybsqvQozP
TLSH
T100652271F2C1D1B2C81358F55978C7B10A293C6176B5E9837B023BBF8A392D3995F21A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-31_9314e0d1ae6ae923ab254b17ff0257c8_elex_redline-stealer_rhadamanthys_stop

File Explorer

2026-07-31_9314e0d1ae6ae923ab254b17ff0257c8_elex_redline-stealer_rhadamanthys_stop

.exe 1.4MB

2026-07-31_9314e0d1ae6ae923ab254b17ff0257c8_elex_redline-stealer_rhadamanthys_stop

IMPHASH 0f049ce24e217892c1b7f2d56270827d
SHA256 81c19e3d48345ca9e2d847681c66c78acd4685aff91eae8dc05f5f5550a7553c
MD5 9314e0d1ae6ae923ab254b17ff0257c8
SHA1 b15669d2d8772bfcaa342e7300a5f5e41c6fb147
SHA512 70c034317d61bb7b31234b539ef85451d84dbcdcd3a8816ef11d51c86da9cba16d2e3450b3f175b143e102ba682fb7baf107569eab911769608680ba101f531d
SSDEEP 12288:D6Xzmh5Lvsqm2bxjUbawK2XcMV8bsKn+oc0csQ4rYq2H82m:mXzmrLUB2bxjUW2sMybsqvQozP
TLSH
T100652271F2C1D1B2C81358F55978C7B10A293C6176B5E9837B023BBF8A392D3995F21A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GenerateConsoleCtrlEvent GetExitCodeProcess WaitForSingleObject CreateProcessA SetConsoleCtrlHandler GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep GetProcAddress ExitProcess GetCommandLineA SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree HeapAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId WriteFile LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind HeapReAlloc VirtualAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA CompareStringA CompareStringW SetEnvironmentVariableA ReadFile SetEndOfFile GetProcessHeap GetFileAttributesA

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-31_9314e0d1ae6ae923ab254b17ff0257c8_elex_redline-stealer_rhadamanthys_stop

kernel32

generic