2026-10-01_9ef284f28afd4e4739849db78f6b107f_elex_redline-stealer_rhadamanthys_stop

General

Target
2026-10-01_9ef284f28afd4e4739849db78f6b107f_elex_redline-stealer_rhadamanthys_stop
Size 1.4MB
Sample261002-jdnfraw18p
SHA256 571701bca57fef41cba009734c04cee5f9e561697ffeff45e56206fe9dfdb848
MD5 9ef284f28afd4e4739849db78f6b107f
SHA1 16ff517de9638b06eb2bacc133f166ee12828dfe
SHA512 0d79439ec4b83d53a89a02c36b1e48966b1ea22d013a3a0afaf414d537292b4364e1ddc72e39fea25a0ee3215d7b7bd43868c8debc6f26d46a38cf8db71b8f8d
SSDEEP 24576:mRmb57GBiOl6a8JTth/RWZvR6wQQ92pN3u:msb5+Pl6bJTIZ5jdgps
TLSH
T1286523417952E073C0571539D8CCC760BD7EBE61DDA55AA3EBAA0A3BEA303C1791720E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-01_9ef284f28afd4e4739849db78f6b107f_elex_redline-stealer_rhadamanthys_stop

File Explorer

2026-10-01_9ef284f28afd4e4739849db78f6b107f_elex_redline-stealer_rhadamanthys_stop

.exe 1.4MB

2026-10-01_9ef284f28afd4e4739849db78f6b107f_elex_redline-stealer_rhadamanthys_stop

IMPHASH ba2c974ed567c90fe365844af978f320
SHA256 571701bca57fef41cba009734c04cee5f9e561697ffeff45e56206fe9dfdb848
MD5 9ef284f28afd4e4739849db78f6b107f
SHA1 16ff517de9638b06eb2bacc133f166ee12828dfe
SHA512 0d79439ec4b83d53a89a02c36b1e48966b1ea22d013a3a0afaf414d537292b4364e1ddc72e39fea25a0ee3215d7b7bd43868c8debc6f26d46a38cf8db71b8f8d
SSDEEP 24576:mRmb57GBiOl6a8JTth/RWZvR6wQQ92pN3u:msb5+Pl6bJTIZ5jdgps
TLSH
T1286523417952E073C0571539D8CCC760BD7EBE61DDA55AA3EBAA0A3BEA303C1791720E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9747

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GenerateConsoleCtrlEvent GetExitCodeProcess WaitForSingleObject CreateProcessA SetConsoleCtrlHandler GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep GetProcAddress ExitProcess GetCommandLineA GetStartupInfoA SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree HeapAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId WriteFile LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind HeapReAlloc VirtualAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA CompareStringA CompareStringW SetEnvironmentVariableA ReadFile SetEndOfFile GetProcessHeap GetFileAttributesA

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-01_9ef284f28afd4e4739849db78f6b107f_elex_redline-stealer_rhadamanthys_stop

kernel32

generic