General
- Target 2026-07-01_faedf6a0b5878318804f952c9751289f_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260701-tt12wsbw9s
- SHA256 822eeafcb95fd58e8735567b40669871d24a0fa585b69ece6977f0c4a0e0fcde
- MD5 faedf6a0b5878318804f952c9751289f
- SHA1 c320f9c8145e44faa662b85bc70c11f5111a4237
- SHA512 a37e58d3b16c0b6515230cadbc099ce846ed5fed14302a7aac801ad65441d21d97168a671c95618f66b7fbd3317e12f0ed955b40783aa98a2a01f128c7d911db
- SSDEEP 3072:6JWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:6ghLQ0sQmpcF8BzXfwVfAI
- TLSH T139344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-01_faedf6a0b5878318804f952c9751289f_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-07-01_faedf6a0b5878318804f952c9751289f_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 822eeafcb95fd58e8735567b40669871d24a0fa585b69ece6977f0c4a0e0fcde
- MD5 faedf6a0b5878318804f952c9751289f
- SHA1 c320f9c8145e44faa662b85bc70c11f5111a4237
- SHA512 a37e58d3b16c0b6515230cadbc099ce846ed5fed14302a7aac801ad65441d21d97168a671c95618f66b7fbd3317e12f0ed955b40783aa98a2a01f128c7d911db
- SSDEEP 3072:6JWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:6ghLQ0sQmpcF8BzXfwVfAI
- TLSH T139344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE