General

  • Target
    2026-04-17_b2bc4210758f2edd871c3dde8ad1a80a_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
  • Size 770KB
  • Sample260417-e67mwaaw3t
  • SHA256 27bc9cbcb6e5026958dc49cd712e93f1e23ef44d272053d04f1cf110bb6772e3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-04-17_b2bc4210758f2edd871c3dde8ad1a80a_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
    • Size 770KB
    • SHA256 27bc9cbcb6e5026958dc49cd712e93f1e23ef44d272053d04f1cf110bb6772e3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks