2026-08-09_d420c145c867b6d0d57bb888cfe7f850_elex_floxif_rhadamanthys_stealc_stop_tofsee

General

Target
2026-08-09_d420c145c867b6d0d57bb888cfe7f850_elex_floxif_rhadamanthys_stealc_stop_tofsee
Size 812KB
Sample260809-g7zprsscpe
SHA256 7497c4f435c6b5e74fb5f4a8ca3df721fcebe517da609380750ca9df88e8576f
MD5 d420c145c867b6d0d57bb888cfe7f850
SHA1 3ce7dcec8b04f289b3aef7a0c26f637020b9ee6e
SHA512 51f439ec2c6056ac7e2f5103b118fa91983832cae1661cfa710846dcfa195de23d4153c09d69da3a567e2a3db9af092be4fbaf15ed6e31634bca5f9cdef6b9c8
SSDEEP 24576:kBQkTf4UqdNEgYjGutlXhraL0B5mEkUiqOrCZb4uc0lhrEH77:nkTgUqdNEg0GutTr7rmkK
TLSH
T1C7050144728083F5D0BA28307599DB355AE5BD3D036B5DDBF3853BE14E2E292CA253CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_d420c145c867b6d0d57bb888cfe7f850_elex_floxif_rhadamanthys_stealc_stop_tofsee

File Explorer

2026-08-09_d420c145c867b6d0d57bb888cfe7f850_elex_floxif_rhadamanthys_stealc_stop_tofsee

.exe 812KB

2026-08-09_d420c145c867b6d0d57bb888cfe7f850_elex_floxif_rhadamanthys_stealc_stop_tofsee

IMPHASH 720f62ecaae027b5c3ec6686644322e9
SHA256 7497c4f435c6b5e74fb5f4a8ca3df721fcebe517da609380750ca9df88e8576f
MD5 d420c145c867b6d0d57bb888cfe7f850
SHA1 3ce7dcec8b04f289b3aef7a0c26f637020b9ee6e
SHA512 51f439ec2c6056ac7e2f5103b118fa91983832cae1661cfa710846dcfa195de23d4153c09d69da3a567e2a3db9af092be4fbaf15ed6e31634bca5f9cdef6b9c8
SSDEEP 24576:kBQkTf4UqdNEgYjGutlXhraL0B5mEkUiqOrCZb4uc0lhrEH77:nkTgUqdNEg0GutTr7rmkK
TLSH
T1C7050144728083F5D0BA28307599DB355AE5BD3D036B5DDBF3853BE14E2E292CA253CA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

65519

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RaiseException GetLastError IsBadReadPtr VirtualProtect GetProcAddress GetModuleHandleA MultiByteToWideChar lstrlenA WideCharToMultiByte lstrlenW GetModuleFileNameW GetModuleFileNameA LoadLibraryA FreeResource SizeofResource LockResource LoadResource FindResourceA Module32Next CloseHandle Module32First CreateToolhelp32Snapshot GetCurrentProcessId CreateFileA CreateFileW GetModuleHandleW VirtualAlloc VirtualFree HeapFree GetProcessHeap FreeLibrary HeapAlloc HeapReAlloc GetCommandLineA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate Sleep ExitProcess WriteFile GetStdHandle HeapSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetConsoleCP GetConsoleMode ReadFile TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement FlushFileBuffers SetFilePointer SetHandleCount GetFileType GetStartupInfoA RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage CompareStringA CompareStringW SetEnvironmentVariableA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_d420c145c867b6d0d57bb888cfe7f850_elex_floxif_rhadamanthys_stealc_stop_tofsee

kernel32

generic