3129220acad9d2b515ea1927d48b6da27849eeabcff0ad6fefb27456a45e10d3 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-07-08...ee.exe

windows10-2004-x64

7

2026-07-08...ee.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_7679da6ea13ad660f5a59c462d3bd192_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
Size 766KB
Sample260708-e47j4aay8s
SHA256 3129220acad9d2b515ea1927d48b6da27849eeabcff0ad6fefb27456a45e10d3
MD5 7679da6ea13ad660f5a59c462d3bd192
SHA1 f61b7a9550b11a8fe90f2736b8cc719326872c29
SHA512 23405fc34848ccefb4b1d98000d44836386d9d1faada48a03819b9a22d8093b74b445a5b6ca48cde2a718ad4a274ef8ed32332c04c22e5a8f2b6d4707fd65f5f
SSDEEP 12288:iA26Wus1Kdlg7ClAoTtvkRBa8lKYK2krUyEGGgp9IobHGqR+pf3jJwkDzVJUxrnV:id6PdQClRTeRBXKEFG1rDHmj7dip
TLSH
T10AF41212B2C0C0B2C22B18755269DEB144BABD7A5DA0045E37EC39794FB27F2065EB5F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-08_7679da6ea13ad660f5a59c462d3bd192_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

discovery ransomware spyware stealer

Behavioral task

behavioral2

Sample

2026-07-08_7679da6ea13ad660f5a59c462d3bd192_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe

Resource

win11ltsc2024-20260706-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

discovery ransomware spyware stealer

Malware Config

Targets

- Target
  2026-07-08_7679da6ea13ad660f5a59c462d3bd192_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 766KB
- SHA256 3129220acad9d2b515ea1927d48b6da27849eeabcff0ad6fefb27456a45e10d3
- MD5 7679da6ea13ad660f5a59c462d3bd192
- SHA1 f61b7a9550b11a8fe90f2736b8cc719326872c29
- SHA512 23405fc34848ccefb4b1d98000d44836386d9d1faada48a03819b9a22d8093b74b445a5b6ca48cde2a718ad4a274ef8ed32332c04c22e5a8f2b6d4707fd65f5f
- SSDEEP 12288:iA26Wus1Kdlg7ClAoTtvkRBa8lKYK2krUyEGGgp9IobHGqR+pf3jJwkDzVJUxrnV:id6PdQClRTeRBXKEFG1rDHmj7dip
- TLSH
  T10AF41212B2C0C0B2C22B18755269DEB144BABD7A5DA0045E37EC39794FB27F2065EB5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomwarespywarestealer

behavioral2

discoveryransomwarespywarestealer

© 2018-2026

Terms | Privacy