General
- Target 2026-07-09_cf5f1a5a265fb4c98a4cf38fbdd95044_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260709-txc48sdv4n
- SHA256 c7eae5a3a26efc45e6fd879f67dc17e2cd4c11be9eb5b9c7310e343a569eed21
- MD5 cf5f1a5a265fb4c98a4cf38fbdd95044
- SHA1 086ac7d6ca99dd42543b77c683893432bf216a66
- SHA512 55c4b0c4a6da5c62096269989b1b8847007aea89806f955dee0eddc0605bf0e4f2f9f7cb34a7ddaef8b80f14df5df0b44d5446756b8fe2919dda1a27828e8845
- SSDEEP 3072:UJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:UghLQ0sQmpcF8BzXfwVfAI
- TLSH T156344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-09_cf5f1a5a265fb4c98a4cf38fbdd95044_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-07-09_cf5f1a5a265fb4c98a4cf38fbdd95044_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 c7eae5a3a26efc45e6fd879f67dc17e2cd4c11be9eb5b9c7310e343a569eed21
- MD5 cf5f1a5a265fb4c98a4cf38fbdd95044
- SHA1 086ac7d6ca99dd42543b77c683893432bf216a66
- SHA512 55c4b0c4a6da5c62096269989b1b8847007aea89806f955dee0eddc0605bf0e4f2f9f7cb34a7ddaef8b80f14df5df0b44d5446756b8fe2919dda1a27828e8845
- SSDEEP 3072:UJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:UghLQ0sQmpcF8BzXfwVfAI
- TLSH T156344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE