2026-08-06_1ddba887bcebab1475df477a39ab454f_elex_redline-stealer_rhadamanthys_stop

General

Target
2026-08-06_1ddba887bcebab1475df477a39ab454f_elex_redline-stealer_rhadamanthys_stop
Size 1.4MB
Sample260807-bef43avcqf
SHA256 86feb482963fd1ef43a97a8683f9d1b33d294b49543a3af4969bf9f7b6ac1f7b
MD5 1ddba887bcebab1475df477a39ab454f
SHA1 d0ea8ab298f4484f6c2d51f4dde7d4e5d7355a39
SHA512 4e1b942b8d6c720aaae9e56af338628147180520ff172888f2550cb13130d126ad5b995f70901514b8d73052c0b84d6b291a704c9ead47e9fa2130bf89cddb84
SSDEEP 12288:W5zGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMW:mjnQ/tbw/2Mkjy6Fr7g0o
TLSH
T10B6522247940E473D91B04B94846C2A1AB7F4C912BB5D78BBB89273B9B383D05A5F389
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-06_1ddba887bcebab1475df477a39ab454f_elex_redline-stealer_rhadamanthys_stop

File Explorer

2026-08-06_1ddba887bcebab1475df477a39ab454f_elex_redline-stealer_rhadamanthys_stop

.exe 1.4MB

2026-08-06_1ddba887bcebab1475df477a39ab454f_elex_redline-stealer_rhadamanthys_stop

IMPHASH ba2c974ed567c90fe365844af978f320
SHA256 86feb482963fd1ef43a97a8683f9d1b33d294b49543a3af4969bf9f7b6ac1f7b
MD5 1ddba887bcebab1475df477a39ab454f
SHA1 d0ea8ab298f4484f6c2d51f4dde7d4e5d7355a39
SHA512 4e1b942b8d6c720aaae9e56af338628147180520ff172888f2550cb13130d126ad5b995f70901514b8d73052c0b84d6b291a704c9ead47e9fa2130bf89cddb84
SSDEEP 12288:W5zGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMW:mjnQ/tbw/2Mkjy6Fr7g0o
TLSH
T10B6522247940E473D91B04B94846C2A1AB7F4C912BB5D78BBB89273B9B383D05A5F389
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9747

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GenerateConsoleCtrlEvent GetExitCodeProcess WaitForSingleObject CreateProcessA SetConsoleCtrlHandler GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep GetProcAddress ExitProcess GetCommandLineA GetStartupInfoA SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree HeapAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId WriteFile LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind HeapReAlloc VirtualAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA CompareStringA CompareStringW SetEnvironmentVariableA ReadFile SetEndOfFile GetProcessHeap GetFileAttributesA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-06_1ddba887bcebab1475df477a39ab454f_elex_redline-stealer_rhadamanthys_stop

kernel32

generic