General
- Target 2026-06-04_b2ee9ed5606747aea2fed52544e01f7c_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260604-qlel5sft2t
- SHA256 ebaadcc07ed14381eb168c3acd95f06a59253c2513dda59d40265859935c1457
- MD5 b2ee9ed5606747aea2fed52544e01f7c
- SHA1 c32a74a647a648f539d9c3017b788c0eb0bfa84b
- SHA512 da28fa60673af85122c323896e2fb5cce89b7c77329babeda91faa80cd5d8d898a9ce307ba3def357e6190f2d03fe8834b12952a259e3a78ae5a8319912e2c8e
- SSDEEP 3072:bJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:bghLQ0sQmpcF8BzXfwVfAI
- TLSH T105344A1272808071E7550B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-04_b2ee9ed5606747aea2fed52544e01f7c_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-06-04_b2ee9ed5606747aea2fed52544e01f7c_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 ebaadcc07ed14381eb168c3acd95f06a59253c2513dda59d40265859935c1457
- MD5 b2ee9ed5606747aea2fed52544e01f7c
- SHA1 c32a74a647a648f539d9c3017b788c0eb0bfa84b
- SHA512 da28fa60673af85122c323896e2fb5cce89b7c77329babeda91faa80cd5d8d898a9ce307ba3def357e6190f2d03fe8834b12952a259e3a78ae5a8319912e2c8e
- SSDEEP 3072:bJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:bghLQ0sQmpcF8BzXfwVfAI
- TLSH T105344A1272808071E7550B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE