2026-08-06_3f31916fd0bfbb7ac52f65c93b436651_elex_rhadamanthys_stealc_stop_tofsee

General

Target
2026-08-06_3f31916fd0bfbb7ac52f65c93b436651_elex_rhadamanthys_stealc_stop_tofsee
Size 1.1MB
Sample260806-b4b7ea1cna
SHA256 e28a7725df2121d5da871b92de50c249b7e84fc4060fc1d0324721b756a22102
MD5 3f31916fd0bfbb7ac52f65c93b436651
SHA1 087ce2c350c31148c05ab037629b0fe6cfa1aac6
SHA512 4caf7dd3c96b572ccbc36e5a93e50a5ed3dbb912fdaefbf686f15589e918157aeb4b6059f6772ec52232e3420af20de1c826cdf9b91d09800b47ceea7c1e3b65
SSDEEP 24576:axeTCaTSu5efmqVgKY4DzHH3FepvV+aDSOG+ghYX59Wfvj:WeT/TSu5XqGHShY9DVgWX5ej
TLSH
T1A94501407AD0C2A3C0A9523985C1C7F49A75E9AD2B39CE93F6D1377B3D126909E306ED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-06_3f31916fd0bfbb7ac52f65c93b436651_elex_rhadamanthys_stealc_stop_tofsee

File Explorer

2026-08-06_3f31916fd0bfbb7ac52f65c93b436651_elex_rhadamanthys_stealc_stop_tofsee

.exe 1.1MB

2026-08-06_3f31916fd0bfbb7ac52f65c93b436651_elex_rhadamanthys_stealc_stop_tofsee

IMPHASH 27829aa329af2b25059a56b7007516bb
SHA256 e28a7725df2121d5da871b92de50c249b7e84fc4060fc1d0324721b756a22102
MD5 3f31916fd0bfbb7ac52f65c93b436651
SHA1 087ce2c350c31148c05ab037629b0fe6cfa1aac6
SHA512 4caf7dd3c96b572ccbc36e5a93e50a5ed3dbb912fdaefbf686f15589e918157aeb4b6059f6772ec52232e3420af20de1c826cdf9b91d09800b47ceea7c1e3b65
SSDEEP 24576:axeTCaTSu5efmqVgKY4DzHH3FepvV+aDSOG+ghYX59Wfvj:WeT/TSu5XqGHShY9DVgWX5ej
TLSH
T1A94501407AD0C2A3C0A9523985C1C7F49A75E9AD2B39CE93F6D1377B3D126909E306ED
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

f:\memtest\MemoryModule08\example\DllLoader\Release\DllLoader.pdb

kernel32

RaiseException GetLastError IsBadReadPtr VirtualProtect GetProcAddress GetModuleHandleA MultiByteToWideChar lstrlenA WideCharToMultiByte lstrlenW GetModuleFileNameW GetModuleFileNameA LoadLibraryA FreeResource SizeofResource LockResource LoadResource FindResourceA Module32Next CloseHandle Module32First CreateToolhelp32Snapshot GetCurrentProcessId CreateFileA CreateFileW GetModuleHandleW VirtualAlloc VirtualFree HeapFree GetProcessHeap FreeLibrary HeapAlloc HeapReAlloc GetCommandLineA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetConsoleCP GetConsoleMode TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ReadFile HeapSize TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement FlushFileBuffers SetFilePointer SetHandleCount GetFileType GetStartupInfoA RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage CompareStringA CompareStringW SetEnvironmentVariableA GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-06_3f31916fd0bfbb7ac52f65c93b436651_elex_rhadamanthys_stealc_stop_tofsee

kernel32

generic