General
- Target 2026-04-17_9c294f0ed21e140118f5943574dc5981_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260417-nywebafw2x
- SHA256 d61449b7fb1702699a2fda555e7c677755a728b47197d1180fbe369e54dd9656
- MD5 9c294f0ed21e140118f5943574dc5981
- SHA1 d1509d157fad2640663f3df9ef0cf93ea5a698d8
- SHA512 68dfa246b1009ad4afadd6c27b87814529b3da5b785e3abed5bdbdf755337f830888622fbbdd1989224c056f736722c3ee576def47d430ce14eab10ad2826fea
- SSDEEP 3072:XJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:XghLQ0sQmpcF8BzXfwVfAI
- TLSH T16E344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-17_9c294f0ed21e140118f5943574dc5981_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-04-17_9c294f0ed21e140118f5943574dc5981_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 d61449b7fb1702699a2fda555e7c677755a728b47197d1180fbe369e54dd9656
- MD5 9c294f0ed21e140118f5943574dc5981
- SHA1 d1509d157fad2640663f3df9ef0cf93ea5a698d8
- SHA512 68dfa246b1009ad4afadd6c27b87814529b3da5b785e3abed5bdbdf755337f830888622fbbdd1989224c056f736722c3ee576def47d430ce14eab10ad2826fea
- SSDEEP 3072:XJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:XghLQ0sQmpcF8BzXfwVfAI
- TLSH T16E344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE