2026-08-08_c2cc7a60f4f759a7d5e4dc8f91302808_elex_maze_rhadamanthys_stealc_stop

General

Target
2026-08-08_c2cc7a60f4f759a7d5e4dc8f91302808_elex_maze_rhadamanthys_stealc_stop
Size 14.6MB
Sample260808-vtx6nsap4w
SHA256 5ce4d153b4113858906f9604406e075c249bcfc28a51438ab7e1d527c5557014
MD5 c2cc7a60f4f759a7d5e4dc8f91302808
SHA1 ee32f6a12f15731b5d2be35a27f7c03427d3ccc8
SHA512 a09f2dd27a2e65dfcf5aa3d1b2c86be2ae3678debed5a17079338730c19d7876bf2940de3b413f51d167ceecada0163f0fb9d60aa27bfaaf47932b640bb9279c
SSDEEP 98304:K///////////////////////////////////////////////////////////////:
TLSH
T1B3F67541B6E1E805FAF789319935D1F8393BFC97E859829F31443F1F38726926982722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_c2cc7a60f4f759a7d5e4dc8f91302808_elex_maze_rhadamanthys_stealc_stop

File Explorer

2026-08-08_c2cc7a60f4f759a7d5e4dc8f91302808_elex_maze_rhadamanthys_stealc_stop

.exe 14.6MB

2026-08-08_c2cc7a60f4f759a7d5e4dc8f91302808_elex_maze_rhadamanthys_stealc_stop

IMPHASH d56890d53749dde8bc65c65be68b457c
SHA256 5ce4d153b4113858906f9604406e075c249bcfc28a51438ab7e1d527c5557014
MD5 c2cc7a60f4f759a7d5e4dc8f91302808
SHA1 ee32f6a12f15731b5d2be35a27f7c03427d3ccc8
SHA512 a09f2dd27a2e65dfcf5aa3d1b2c86be2ae3678debed5a17079338730c19d7876bf2940de3b413f51d167ceecada0163f0fb9d60aa27bfaaf47932b640bb9279c
SSDEEP 98304:K///////////////////////////////////////////////////////////////:
TLSH
T1B3F67541B6E1E805FAF789319935D1F8393BFC97E859829F31443F1F38726926982722
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

39920

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalAlloc GetCurrentProcessId GetExitCodeThread GetLastError DuplicateHandle GetTickCount OpenMutexA LoadLibraryA LoadLibraryW GetModuleFileNameW SetEnvironmentVariableW FindResourceA GlobalFindAtomA GetWindowsDirectoryW GetCurrentDirectoryA CreateDirectoryW RemoveDirectoryW CreateFileW GetProcAddress GetVolumeInformationW GetVersionExA FindNextVolumeMountPointW GetLocaleInfoA GetLocaleInfoW GetNumberFormatA EnumTimeFormatsA ReadConsoleInputW AttachConsole ReadConsoleW WriteConsoleA AddConsoleAliasW GetConsoleAliasesLengthW GetConsoleAliasExesLengthA SetEndOfFile CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle GetFileAttributesExA GetStringTypeW OutputDebugStringW EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte RaiseException RtlUnwind GetCommandLineA IsProcessorFeaturePresent HeapAlloc HeapFree HeapSize IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle WriteFile LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo FlushFileBuffers GetConsoleCP GetConsoleMode GetFileType GetCurrentThreadId GetProcessHeap GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW HeapReAlloc ReadFile

user32

CharUpperBuffW GetClassInfoA LoadKeyboardLayoutW CharLowerBuffA

gdi32

SetStretchBltMode

shell32

FindExecutableA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_c2cc7a60f4f759a7d5e4dc8f91302808_elex_maze_rhadamanthys_stealc_stop

kernel32

user32

gdi32

shell32

generic