2026-10-28_15d305aa1dd1a6204f736274ed0d901c_elex_rhadamanthys_stealc_stop

General

Target
2026-10-28_15d305aa1dd1a6204f736274ed0d901c_elex_rhadamanthys_stealc_stop
Size 944KB
Sample261030-lr7snabs3t
SHA256 51ad6afa0ddf25dbaaac59aedca88ca737d55be0b404148280fb2f5a3f608d01
MD5 15d305aa1dd1a6204f736274ed0d901c
SHA1 1952b98b97b4daca217fda48ce52506052b78dc5
SHA512 d481b8182510ca19dbd58942da6db292034a467164f9d8154680dd5026f8298f5a527fa2258b46b73afff758245401ef8744a3de5443ecf3bf7e33373117a261
SSDEEP 24576:8KFdsDqucrnREbQUq5ALDmI6GttzRVJBOZrPufU+9:8KQIrnREctALCINtb/Buup
TLSH
T15B250296BBC0E03BE411067AC0A2C371397FF5B61B26630FF79512775E637849E122A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-28_15d305aa1dd1a6204f736274ed0d901c_elex_rhadamanthys_stealc_stop

File Explorer

2026-10-28_15d305aa1dd1a6204f736274ed0d901c_elex_rhadamanthys_stealc_stop

.exe 944KB

2026-10-28_15d305aa1dd1a6204f736274ed0d901c_elex_rhadamanthys_stealc_stop

IMPHASH d796a81afadc23edb6cb3f89a106e2bc
SHA256 51ad6afa0ddf25dbaaac59aedca88ca737d55be0b404148280fb2f5a3f608d01
MD5 15d305aa1dd1a6204f736274ed0d901c
SHA1 1952b98b97b4daca217fda48ce52506052b78dc5
SHA512 d481b8182510ca19dbd58942da6db292034a467164f9d8154680dd5026f8298f5a527fa2258b46b73afff758245401ef8744a3de5443ecf3bf7e33373117a261
SSDEEP 24576:8KFdsDqucrnREbQUq5ALDmI6GttzRVJBOZrPufU+9:8KQIrnREctALCINtb/Buup
TLSH
T15B250296BBC0E03BE411067AC0A2C371397FF5B61B26630FF79512775E637849E122A6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

46066

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

f:\soft\EDA\pubkey_verify\Release\pubkey_verify.pdb

kernel32

FindNextFileA FindClose FindFirstFileA EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc SetFileAttributesA GetFileAttributesA FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA GetCommandLineA SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep GetModuleHandleW GetProcAddress ExitProcess WideCharToMultiByte HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetModuleFileNameA GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle MultiByteToWideChar ReadFile SetFilePointer RtlUnwind GetFullPathNameA GetCurrentDirectoryA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount LoadLibraryA CompareStringA CompareStringW SetEnvironmentVariableA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA GetTimeZoneInformation LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize SetEndOfFile GetProcessHeap

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-28_15d305aa1dd1a6204f736274ed0d901c_elex_rhadamanthys_stealc_stop

kernel32

generic