2026-09-24_7c6323fa7b1bf0a02246dd6ce95c2c62_elex_redline-stealer_rhadamanthys_stop

General

Target
2026-09-24_7c6323fa7b1bf0a02246dd6ce95c2c62_elex_redline-stealer_rhadamanthys_stop
Size 1.4MB
Sample260924-dzvjasda46
SHA256 25702994aaef85a8df59be4af173bd2d379a0eef6c29a8b71ca42f5b0da4cdde
MD5 7c6323fa7b1bf0a02246dd6ce95c2c62
SHA1 ae8c1b3d65b02815e042b46c538c05230c2d7f90
SHA512 b01f017f4784b248f034d7d32b8c569c4d0eddc56af00b4e96bcdf3fd5ee96ac62d4920102377f5148c1ba83da6b962c03d956ca66cd5dc5ff065fb2d84b640e
SSDEEP 24576:EAmb57GBiOl6a8JTth/RWZvR6wQQ92pN3l:E3b5+Pl6bJTIZ5jdgpr
TLSH
T17C6523417951E072C05B1539C8CCC760BD7EBE61DD965AA3EB6A0A3BEB303C1792620E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-24_7c6323fa7b1bf0a02246dd6ce95c2c62_elex_redline-stealer_rhadamanthys_stop

File Explorer

2026-09-24_7c6323fa7b1bf0a02246dd6ce95c2c62_elex_redline-stealer_rhadamanthys_stop

.exe 1.4MB

2026-09-24_7c6323fa7b1bf0a02246dd6ce95c2c62_elex_redline-stealer_rhadamanthys_stop

IMPHASH 0f049ce24e217892c1b7f2d56270827d
SHA256 25702994aaef85a8df59be4af173bd2d379a0eef6c29a8b71ca42f5b0da4cdde
MD5 7c6323fa7b1bf0a02246dd6ce95c2c62
SHA1 ae8c1b3d65b02815e042b46c538c05230c2d7f90
SHA512 b01f017f4784b248f034d7d32b8c569c4d0eddc56af00b4e96bcdf3fd5ee96ac62d4920102377f5148c1ba83da6b962c03d956ca66cd5dc5ff065fb2d84b640e
SSDEEP 24576:EAmb57GBiOl6a8JTth/RWZvR6wQQ92pN3l:E3b5+Pl6bJTIZ5jdgpr
TLSH
T17C6523417951E072C05B1539C8CCC760BD7EBE61DD965AA3EB6A0A3BEB303C1792620E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GenerateConsoleCtrlEvent GetExitCodeProcess WaitForSingleObject CreateProcessA SetConsoleCtrlHandler GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep GetProcAddress ExitProcess GetCommandLineA SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree HeapAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId WriteFile LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind HeapReAlloc VirtualAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA CompareStringA CompareStringW SetEnvironmentVariableA ReadFile SetEndOfFile GetProcessHeap GetFileAttributesA

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-24_7c6323fa7b1bf0a02246dd6ce95c2c62_elex_redline-stealer_rhadamanthys_stop

kernel32

generic