General
- Target 2026-04-22_5eae9d05037fbeb433a4fc24f71045cb_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260422-sd9tesdv6x
- SHA256 0d7fab7ad4e5922d2ea6102abbb06eb933944284e19867b00fa47db39aca7973
- MD5 5eae9d05037fbeb433a4fc24f71045cb
- SHA1 39bd5493d6ae43e9c5cf6c6e508ac5d05236dde7
- SHA512 5f77977948505528ab1e2cc58792e1ab9e2b3934e0a37873f0d2738efc1aa67201c3a6b01b92a189e6e515e6a7b6160b7f6f0712424af2cb3a83ee76742f0b44
- SSDEEP 3072:zJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:zghLQ0sQmpcF8BzXfwVfAI
- TLSH T1C5344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-22_5eae9d05037fbeb433a4fc24f71045cb_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-04-22_5eae9d05037fbeb433a4fc24f71045cb_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 0d7fab7ad4e5922d2ea6102abbb06eb933944284e19867b00fa47db39aca7973
- MD5 5eae9d05037fbeb433a4fc24f71045cb
- SHA1 39bd5493d6ae43e9c5cf6c6e508ac5d05236dde7
- SHA512 5f77977948505528ab1e2cc58792e1ab9e2b3934e0a37873f0d2738efc1aa67201c3a6b01b92a189e6e515e6a7b6160b7f6f0712424af2cb3a83ee76742f0b44
- SSDEEP 3072:zJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:zghLQ0sQmpcF8BzXfwVfAI
- TLSH T1C5344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE