cd150aa53a94b52bb54df1f128beb3c5a643be931b0cb8b865e34dd5248d8b3c | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-07-08...op.exe

windows10-2004-x64

7

2026-07-08...op.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_a375628c066e5e43c16dbed11bdecdc3_elex_redline-stealer_rhadamanthys_stealc_stop
Size 667KB
Sample260708-ex2p9sbv3k
SHA256 cd150aa53a94b52bb54df1f128beb3c5a643be931b0cb8b865e34dd5248d8b3c
MD5 a375628c066e5e43c16dbed11bdecdc3
SHA1 71b73e9256625e9816cbe96f539eb2280b7f3e56
SHA512 d4eb2d3c304e7f7dc8c66583e506a6c150eb6a92e8fef67d8cd28232b33ea9b90d867b703938e39ad49c65c2833f3b2432271b72d001991414a990cf4d4b33dc
SSDEEP 12288:CYmIjE5xabNHJmAWqrXWSh69QJULxVbw3TX/16qG7FJSekBVOCeo3Nvk4xm3L0:+5INYAWqrGSmQJU3s3TvQlDPkB4O3NNN
TLSH
T117E4230976A1C032D4D6B930855C87F2EF3DBC3236E8A21377694BBB9B605D1D67234A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-08_a375628c066e5e43c16dbed11bdecdc3_elex_redline-stealer_rhadamanthys_stealc_stop.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

14 signatures

150 seconds

discovery ransomware spyware stealer

Behavioral task

behavioral2

Sample

2026-07-08_a375628c066e5e43c16dbed11bdecdc3_elex_redline-stealer_rhadamanthys_stealc_stop.exe

Resource

win11ltsc2024-20260706-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

discovery spyware stealer

Malware Config

Targets

- Target
  2026-07-08_a375628c066e5e43c16dbed11bdecdc3_elex_redline-stealer_rhadamanthys_stealc_stop
- Size 667KB
- SHA256 cd150aa53a94b52bb54df1f128beb3c5a643be931b0cb8b865e34dd5248d8b3c
- MD5 a375628c066e5e43c16dbed11bdecdc3
- SHA1 71b73e9256625e9816cbe96f539eb2280b7f3e56
- SHA512 d4eb2d3c304e7f7dc8c66583e506a6c150eb6a92e8fef67d8cd28232b33ea9b90d867b703938e39ad49c65c2833f3b2432271b72d001991414a990cf4d4b33dc
- SSDEEP 12288:CYmIjE5xabNHJmAWqrXWSh69QJULxVbw3TX/16qG7FJSekBVOCeo3Nvk4xm3L0:+5INYAWqrGSmQJU3s3TvQlDPkB4O3NNN
- TLSH
  T117E4230976A1C032D4D6B930855C87F2EF3DBC3236E8A21377694BBB9B605D1D67234A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomwarespywarestealer

behavioral2

discoveryspywarestealer

© 2018-2026

Terms | Privacy