General
- Target 2026-07-09_a723df1a39d6e7349d27c1c415272d02_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260709-ppzk2sat7n
- SHA256 51e97fa6456645f9e62af4ffa76b89c6bdb6ec1719d4d31e1f2b55f45cad43ee
- MD5 a723df1a39d6e7349d27c1c415272d02
- SHA1 24efd658c000812248910c07f1489cc19f3688d9
- SHA512 f51d15bbb552465fbd8ca7dd385b57ca0486a0bdf03c79d6f7875c35e56b41d79e0f651a694d9a9e969a201639c216426965c424d9a907f231ba918a6f53a7c1
- SSDEEP 3072:4JWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkQI9:4ghLQ0sQmpcF8BzXfwVfQI
- TLSH T135344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-09_a723df1a39d6e7349d27c1c415272d02_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-07-09_a723df1a39d6e7349d27c1c415272d02_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 51e97fa6456645f9e62af4ffa76b89c6bdb6ec1719d4d31e1f2b55f45cad43ee
- MD5 a723df1a39d6e7349d27c1c415272d02
- SHA1 24efd658c000812248910c07f1489cc19f3688d9
- SHA512 f51d15bbb552465fbd8ca7dd385b57ca0486a0bdf03c79d6f7875c35e56b41d79e0f651a694d9a9e969a201639c216426965c424d9a907f231ba918a6f53a7c1
- SSDEEP 3072:4JWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkQI9:4ghLQ0sQmpcF8BzXfwVfQI
- TLSH T135344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE