General
- Target 2026-05-15_e75d80adf11f96ca15cf6998e2d10d42_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- Sample260515-zaangsax7k
- SHA256 6498489f2a0dd4b3ab97fc93a4b7d4752a6c8b6ed102c71b23f5c67eccf411c7
- MD5 e75d80adf11f96ca15cf6998e2d10d42
- SHA1 bacac1f7aa4561c74be74b22b416bddf6923c4a2
- SHA512 fa340a30f1e84a5537954c8c258b8fb7a5591ee61a74ad2b42d82bc44112948c61a1b4fbe689c1cb6a1b3f59633353203291860ea9147a9dd7a463442b1de678
- SSDEEP 24576:Sd6wdOCwgTeGAC2N9R0uIFg9bRCCijrhPz6/CsPYuCj8:SPACTTfQN9eu0g9bRqt6zYuz
- TLSH T1FBF41220B280D071D53710764AF8DE702ABA7D3A55A0005E7BFBBEA90E737D1026D79E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-15_e75d80adf11f96ca15cf6998e2d10d42_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-15_e75d80adf11f96ca15cf6998e2d10d42_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-15_e75d80adf11f96ca15cf6998e2d10d42_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- SHA256 6498489f2a0dd4b3ab97fc93a4b7d4752a6c8b6ed102c71b23f5c67eccf411c7
- MD5 e75d80adf11f96ca15cf6998e2d10d42
- SHA1 bacac1f7aa4561c74be74b22b416bddf6923c4a2
- SHA512 fa340a30f1e84a5537954c8c258b8fb7a5591ee61a74ad2b42d82bc44112948c61a1b4fbe689c1cb6a1b3f59633353203291860ea9147a9dd7a463442b1de678
- SSDEEP 24576:Sd6wdOCwgTeGAC2N9R0uIFg9bRCCijrhPz6/CsPYuCj8:SPACTTfQN9eu0g9bRqt6zYuz
- TLSH T1FBF41220B280D071D53710764AF8DE702ABA7D3A55A0005E7BFBBEA90E737D1026D79E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1