2026-08-06_614e997f30822d43b9e65795661d8cd9_elex_maze_rhadamanthys_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-06_614e997f30822d43b9e65795661d8cd9_elex_maze_rhadamanthys_stealc
Size 234KB
Sample260806-sv1bbavaqa
SHA256 779487315951eed9d7c56e652927b586c65bfa0d1879413e7b0d3475d021eaa2
MD5 614e997f30822d43b9e65795661d8cd9
SHA1 99abd4a625ff29baab15bb31106afa511460467d
SHA512 ba84a20accd9a1cfdba87a84d4231166ea9bbdb50d945316efa4baea15e6ca3b52733e96306d2bfa04e3f5b6a3e894c4921ba57062ae8e86478b92ddf4a9c897
SSDEEP 3072:jYCJ5GaL502H/8aEO3OnF/IV8uj4lcslb47Jnvig+QPV9vmbUYUyLiuViCr:jYC7/nEO3Rj4hF8ZighZtuVpr
TLSH
T12E34AE11BAC5C0B6E173023609E5A735667EFC318E3ADA5B67A44F0E5E30582FA35363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-08-06_614e997f30822d43b9e65795661d8cd9_elex_maze_rhadamanthys_stealc

File Explorer

2026-08-06_614e997f30822d43b9e65795661d8cd9_elex_maze_rhadamanthys_stealc

.exe 234KB

2026-08-06_614e997f30822d43b9e65795661d8cd9_elex_maze_rhadamanthys_stealc

IMPHASH 265598957d703879b7ceb8560d902c94
SHA256 779487315951eed9d7c56e652927b586c65bfa0d1879413e7b0d3475d021eaa2
MD5 614e997f30822d43b9e65795661d8cd9
SHA1 99abd4a625ff29baab15bb31106afa511460467d
SHA512 ba84a20accd9a1cfdba87a84d4231166ea9bbdb50d945316efa4baea15e6ca3b52733e96306d2bfa04e3f5b6a3e894c4921ba57062ae8e86478b92ddf4a9c897
SSDEEP 3072:jYCJ5GaL502H/8aEO3OnF/IV8uj4lcslb47Jnvig+QPV9vmbUYUyLiuViCr:jYC7/nEO3Rj4hF8ZighZtuVpr
TLSH
T12E34AE11BAC5C0B6E173023609E5A735667EFC318E3ADA5B67A44F0E5E30582FA35363
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

b8:52:87:83:93:9f:6b:8c:2f:cd:ea:87:c8:b6:b8:dc:a2:4c:b8:c9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=7HS-GO BO2012Launcher

Chains

Aug 4, 2026

CN=7HS-GO BO2012Launcher

Subject

CN=7HS-GO BO2012Launcher

Serial Number

19:0f:68:e5:e2:6d:3f:ac:47:f2:f8:5c:ed:7a:2f:83

Issuer

CN=7HS-GO BO2012Launcher

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 4, 2026 - Aug 4, 2036

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Minor OS version

Major OS version

Entry point

70750

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

Shell_NotifyIconW

comctl32

ord413 InitCommonControlsEx ord410

ws2_32

freeaddrinfo getaddrinfo WSAAddressToStringW gethostname WSAStartup WSACleanup

shlwapi

PathFileExistsW

kernel32

FindClose GetCurrentDirectoryW FindFirstFileW FindNextFileW CopyFileW MultiByteToWideChar WideCharToMultiByte GetLocalTime GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW GetFileAttributesW DeleteFileW WriteFile CloseHandle CreateProcessW CreateFileW HeapReAlloc GetOEMCP GetACP IsValidCodePage FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetModuleFileNameW GetFileType GetProcessHeap GetCurrentThreadId IsDebuggerPresent HeapSize GetModuleHandleExW ExitProcess EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW IsProcessorFeaturePresent GetProcAddress GetModuleHandleW GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess Sleep InitializeCriticalSectionAndSpinCount SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter LoadLibraryExW GetConsoleCP GetConsoleMode SetFilePointerEx OutputDebugStringW SetStdHandle WriteConsoleW FlushFileBuffers GetStdHandle GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer RaiseException RtlUnwind GetLastError HeapFree GetCommandLineW GetCPInfo HeapAlloc

user32

GetClassNameW SetWindowLongW GetWindowLongW PtInRect FillRect MapWindowPoints ClientToScreen GetCursorPos SetCursor AdjustWindowRect GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC SetForegroundWindow LoadCursorW DrawTextW TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu GetSystemMetrics EnableWindow GetDlgCtrlID ShowWindow DestroyWindow CreateWindowExW RegisterClassExW PostQuitMessage DefWindowProcW PostMessageW SendMessageW TrackMouseEvent MessageBoxW DispatchMessageW TranslateMessage GetMessageW DestroyIcon LoadIconW UpdateWindow

gdi32

SetTextColor CreateSolidBrush SetBkMode SetBkColor SelectObject GetStockObject EnumFontFamiliesExW DeleteObject CreateFontW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-06_614e997f30822d43b9e65795661d8cd9_elex_maze_rhadamanthys_stealc

PE Signature issue

shell32

comctl32

ws2_32

shlwapi

kernel32

user32

gdi32

generic