2026-11-03_3f0466ea6fc4d7f1e837af3c7cf8e446_elex_redline-stealer_rhadamanthys_stop

General

Target
2026-11-03_3f0466ea6fc4d7f1e837af3c7cf8e446_elex_redline-stealer_rhadamanthys_stop
Size 820KB
Sample261104-2wewfavygv
SHA256 9cffbda53562c15673917b8bf5cf6196ac641c4f580156de4cd92eb3bffbe770
MD5 3f0466ea6fc4d7f1e837af3c7cf8e446
SHA1 ea40105a478456b02aca69344bebf71e3f545b71
SHA512 3a0bfe4e410162e7307fa01936af85626aa4483b4999f88844867faec6d21e37fced86c17cb5016811249ef00de71bf365c2d4e79a5180d07e37be98bb1a212e
SSDEEP 24576:ykwiZo8ss1isiBFyVyr50p4ZfYDZ12fq/E:yYZlsZBIw0pKWZgfq8
TLSH
T1FA05236EBAA1C4F1E9266DB4D92BC1F78BD42C5194E8F406774617BA8F30143CB1A39C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_3f0466ea6fc4d7f1e837af3c7cf8e446_elex_redline-stealer_rhadamanthys_stop

File Explorer

2026-11-03_3f0466ea6fc4d7f1e837af3c7cf8e446_elex_redline-stealer_rhadamanthys_stop

.exe 820KB

2026-11-03_3f0466ea6fc4d7f1e837af3c7cf8e446_elex_redline-stealer_rhadamanthys_stop

IMPHASH 0f049ce24e217892c1b7f2d56270827d
SHA256 9cffbda53562c15673917b8bf5cf6196ac641c4f580156de4cd92eb3bffbe770
MD5 3f0466ea6fc4d7f1e837af3c7cf8e446
SHA1 ea40105a478456b02aca69344bebf71e3f545b71
SHA512 3a0bfe4e410162e7307fa01936af85626aa4483b4999f88844867faec6d21e37fced86c17cb5016811249ef00de71bf365c2d4e79a5180d07e37be98bb1a212e
SSDEEP 24576:ykwiZo8ss1isiBFyVyr50p4ZfYDZ12fq/E:yYZlsZBIw0pKWZgfq8
TLSH
T1FA05236EBAA1C4F1E9266DB4D92BC1F78BD42C5194E8F406774617BA8F30143CB1A39C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GenerateConsoleCtrlEvent GetExitCodeProcess WaitForSingleObject CreateProcessA SetConsoleCtrlHandler GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep GetProcAddress ExitProcess GetCommandLineA SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree HeapAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId WriteFile LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind HeapReAlloc VirtualAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA CompareStringA CompareStringW SetEnvironmentVariableA ReadFile SetEndOfFile GetProcessHeap GetFileAttributesA

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_3f0466ea6fc4d7f1e837af3c7cf8e446_elex_redline-stealer_rhadamanthys_stop

kernel32

generic