2026-11-02_a2197892460d2432eaa03e4bf18ad3ae_amadey_elex_redline-stealer_rhadamanthys_stop

General

Target
2026-11-02_a2197892460d2432eaa03e4bf18ad3ae_amadey_elex_redline-stealer_rhadamanthys_stop
Size 14.1MB
Sample261103-dhk9asyvb1
SHA256 9c70047f2d571453656987e667e8b5d4f3b261012803f00c6b858f558b795e50
MD5 a2197892460d2432eaa03e4bf18ad3ae
SHA1 dc4de5c1ad079c889b60b5abebd4412d48a78d65
SHA512 42a21367c688af3e9fc7bcf544b9c06c88c70a1a6d790e085c0eba8affc53705dcc85f28778944fb5c6fb8752ef31c86dc993a37ecddbfd52f419c223a3c7f3c
SSDEEP 24576:Udor7brnsssssssssssssssssssssssssssssssssssssssssssssssssssssssf:FD
TLSH
T1DCE66DB6D9A48836C0A9817C13ADBB2D0BEDF5B1D893DA33A145C8D60C1327539DBE17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-02_a2197892460d2432eaa03e4bf18ad3ae_amadey_elex_redline-stealer_rhadamanthys_stop

File Explorer

2026-11-02_a2197892460d2432eaa03e4bf18ad3ae_amadey_elex_redline-stealer_rhadamanthys_stop

.exe 14.1MB

2026-11-02_a2197892460d2432eaa03e4bf18ad3ae_amadey_elex_redline-stealer_rhadamanthys_stop

IMPHASH 45e1ee20d1177849cfe703aec27ed0a7
SHA256 9c70047f2d571453656987e667e8b5d4f3b261012803f00c6b858f558b795e50
MD5 a2197892460d2432eaa03e4bf18ad3ae
SHA1 dc4de5c1ad079c889b60b5abebd4412d48a78d65
SHA512 42a21367c688af3e9fc7bcf544b9c06c88c70a1a6d790e085c0eba8affc53705dcc85f28778944fb5c6fb8752ef31c86dc993a37ecddbfd52f419c223a3c7f3c
SSDEEP 24576:Udor7brnsssssssssssssssssssssssssssssssssssssssssssssssssssssssf:FD
TLSH
T1DCE66DB6D9A48836C0A9817C13ADBB2D0BEDF5B1D893DA33A145C8D60C1327539DBE17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

13032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RemoveVectoredExceptionHandler OpenFile GetModuleHandleExA WriteConsoleOutputCharacterA LoadResource LoadLibraryExW GetCurrentProcess InitializeSListHead HeapFree GlobalLock CancelWaitableTimer UnlockFile GetModuleHandleW GetConsoleAliasesA SetFileTime GetCompressedFileSizeW TzSpecificLocalTimeToSystemTime FindResourceExA GlobalFindAtomA GetLocaleInfoW GetSystemPowerStatus GetSystemTimeAdjustment Beep HeapReAlloc GetTimeZoneInformation CompareStringW DisconnectNamedPipe CreateJobObjectA SetLastError GetProcAddress EnumDateFormatsExA GlobalFree GetTempFileNameA GetLocalTime GetAtomNameA OpenWaitableTimerW LocalAlloc AddAtomW VirtualLock SetCommMask GlobalWire lstrcatW FatalExit GetCurrentDirectoryA GetConsoleCursorInfo EnumCalendarInfoExA LCMapStringW GetFileAttributesW GetEnvironmentVariableW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind EnterCriticalSection LeaveCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCurrentThread DeleteCriticalSection FatalAppExitA HeapCreate HeapDestroy VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount HeapSize SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale FlushFileBuffers ReadFile SetEndOfFile GetProcessHeap CompareStringA SetEnvironmentVariableA GetModuleHandleA

advapi32

RegCreateKeyW

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-02_a2197892460d2432eaa03e4bf18ad3ae_amadey_elex_redline-stealer_rhadamanthys_stop

kernel32

advapi32

generic