General
- Target 2026-07-01_2256a4ffd6ec017a787c711239a80e1b_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- Sample260701-mfylaabw4j
- SHA256 c4ae824ead824a7bf5c4e3a70c6efb63b796dee1df2349afb2dc3d98ba4719bf
- MD5 2256a4ffd6ec017a787c711239a80e1b
- SHA1 f55a9597ad195c0d028611d011f76c547e03a1d7
- SHA512 d21472b40ba2994eab0e38df57dc6ab789cc8cd2033a19480280ead3831e2ad943bedff09d1ced7f6411d3f8e783736ae4586ed68b2168d45fe18047f52efd8b
- SSDEEP 12288:Rtg6JsYGv3zdxSao4Txv9MZAPCBPzDV3AOUswg46VnRj4z+CAmEF65TADgtJ2:Ru6Ng3fSaJT7aAPCZ+5swg4itsZ+6q82
- TLSH T178F41222B280D0B6D167433343F9CE714CB67C392961C46F27CD7A6E4E32AE195197EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_2256a4ffd6ec017a787c711239a80e1b_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_2256a4ffd6ec017a787c711239a80e1b_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_2256a4ffd6ec017a787c711239a80e1b_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- SHA256 c4ae824ead824a7bf5c4e3a70c6efb63b796dee1df2349afb2dc3d98ba4719bf
- MD5 2256a4ffd6ec017a787c711239a80e1b
- SHA1 f55a9597ad195c0d028611d011f76c547e03a1d7
- SHA512 d21472b40ba2994eab0e38df57dc6ab789cc8cd2033a19480280ead3831e2ad943bedff09d1ced7f6411d3f8e783736ae4586ed68b2168d45fe18047f52efd8b
- SSDEEP 12288:Rtg6JsYGv3zdxSao4Txv9MZAPCBPzDV3AOUswg46VnRj4z+CAmEF65TADgtJ2:Ru6Ng3fSaJT7aAPCZ+5swg4itsZ+6q82
- TLSH T178F41222B280D0B6D167433343F9CE714CB67C392961C46F27CD7A6E4E32AE195197EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1