2026-09-29_c1eeefb1543f01b367c8e33f88f5d82e_elex_redline-stealer_smoke-loader_stealc_stop_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-29_c1eeefb1543f01b367c8e33f88f5d82e_elex_redline-stealer_smoke-loader_stealc_stop_tofsee
Size 793KB
Sample260929-vsbw2ssv3k
SHA256 1e1170bb112136cb8918d212e5ebc55e938ac6469a65099ff851262781e878d8
MD5 c1eeefb1543f01b367c8e33f88f5d82e
SHA1 299097b7fc68c326366e8d752ac0a9448e279433
SHA512 76c6acd25957669f23f238576b3e07212a8f73d2d84f31cc3778ae0e70c225b72d84841ab8ded1f9d25498449018820094210f42c00f178189186f6bf100b0c3
SSDEEP 12288:IKccOM3EQb8FNwp/SInr8vv2BDeT+bVYHTb3FRk/rMNxaXqqlPbJKTGv5DYFXOBB:bnuW/i328ab4F+rM/aXq6bJfBUam6
TLSH
T17305F1163680C032E31A277149D6F6F45A99BD784AD5A64FF6B83F7A5D311830A3B20F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_c1eeefb1543f01b367c8e33f88f5d82e_elex_redline-stealer_smoke-loader_stealc_stop_tofsee

File Explorer

2026-09-29_c1eeefb1543f01b367c8e33f88f5d82e_elex_redline-stealer_smoke-loader_stealc_stop_tofsee

.exe 793KB

2026-09-29_c1eeefb1543f01b367c8e33f88f5d82e_elex_redline-stealer_smoke-loader_stealc_stop_tofsee

IMPHASH df865cddab3e05036cbd0389c4eb46dc
SHA256 1e1170bb112136cb8918d212e5ebc55e938ac6469a65099ff851262781e878d8
MD5 c1eeefb1543f01b367c8e33f88f5d82e
SHA1 299097b7fc68c326366e8d752ac0a9448e279433
SHA512 76c6acd25957669f23f238576b3e07212a8f73d2d84f31cc3778ae0e70c225b72d84841ab8ded1f9d25498449018820094210f42c00f178189186f6bf100b0c3
SSDEEP 12288:IKccOM3EQb8FNwp/SInr8vv2BDeT+bVYHTb3FRk/rMNxaXqqlPbJKTGv5DYFXOBB:bnuW/i328ab4F+rM/aXq6bJfBUam6
TLSH
T17305F1163680C032E31A277149D6F6F45A99BD784AD5A64FF6B83F7A5D311830A3B20F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

57241

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\work\bsVault\bsVaultSDK\Release\bsVaultApp.pdb

kernel32

VirtualAlloc HeapSize Sleep ExitProcess TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree HeapCreate GetStdHandle GetACP IsValidCodePage LCMapStringA LCMapStringW FreeEnvironmentStringsA RaiseException FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW RtlUnwind HeapReAlloc GetStartupInfoA GetCommandLineA GetSystemTimeAsFileTime GetOEMCP GetCPInfo GetLocaleInfoA InterlockedExchange GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetVersionExA GetCurrentThreadId GlobalAddAtomA FlushFileBuffers SetFilePointer LoadLibraryA GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GetCurrentProcessId GetModuleFileNameA FreeLibrary InterlockedDecrement InterlockedIncrement GetModuleHandleA GetModuleHandleW GetProcAddress CompareStringA lstrcmpA GlobalGetAtomNameA SetLastError GlobalLock GlobalUnlock FormatMessageA lstrlenA MultiByteToWideChar DeleteFileA ReadFile WriteFile GetFileSize GlobalFree GlobalAlloc GetVolumeInformationA GetDriveTypeA HeapFree GetProcessHeap HeapAlloc FindNextFileA FindFirstFileA GetCurrentProcess LocalFree CloseHandle CreateFileA SetFileAttributesA CreateDirectoryA GetLastError FindResourceA LoadResource LockResource SizeofResource GetEnvironmentStrings WideCharToMultiByte

user32

GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow GetClientRect PostMessageA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx CopyRect DefWindowProcA CallWindowProcA GetMenu SystemParametersInfoA IsIconic GetWindowPlacement GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetWindowsHookExA CallNextHookEx DispatchMessageA GetKeyState PeekMessageA GetForegroundWindow EnableMenuItem SetWindowPos SetWindowLongA IsWindow GetDlgItem GetSubMenu GetMenuItemCount GetFocus ClientToScreen GetWindow GetDlgCtrlID GetWindowRect GetClassNameA PtInRect SetWindowTextA GetWindowThreadProcessId SendMessageA GetParent GetWindowLongA GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxA UnhookWindowsHookEx LoadCursorA GetSystemMetrics GetDC ReleaseDC GetSysColor GetSysColorBrush GetWindowTextA GetMenuState RemovePropA GetPropA SetPropA GetClassLongA GetCapture WinHelpA LoadIconA RegisterWindowMessageA PostQuitMessage CheckMenuItem GetMenuItemID DestroyMenu SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ValidateRect ModifyMenuA

gdi32

PtVisible RectVisible TextOutA ExtTextOutA Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx DeleteDC CreateBitmap SetBkColor GetClipBox SetMapMode SetTextColor GetStockObject GetDeviceCaps RestoreDC SaveDC DeleteObject

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA GetTokenInformation DuplicateTokenEx RevertToSelf ImpersonateLoggedOnUser CopySid GetLengthSid AllocateAndInitializeSid OpenProcessToken SetNamedSecurityInfoA SetSecurityInfo SetEntriesInAclA LogonUserA

oleaut32

VariantChangeType VariantClear SysAllocStringLen VariantInit

netapi32

NetUserGetInfo NetApiBufferFree NetUserAdd NetUserSetInfo NetGetDCName

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_c1eeefb1543f01b367c8e33f88f5d82e_elex_redline-stealer_smoke-loader_stealc_stop_tofsee

kernel32

user32

gdi32

winspool.drv

advapi32

oleaut32

netapi32

generic