fca14d9c6079407bca57d45f7aa707516930ac0d4483b6dd9fd46eb69a7daac6 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-07-11...op.exe

windows10-2004-x64

7

2026-07-11...op.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-11_b47aa2a208cdc8a6a3f4a00da430ffc1_elex_redline-stealer_rhadamanthys_stealc_stop
Size 663KB
Sample260711-evp9fsbt7m
SHA256 fca14d9c6079407bca57d45f7aa707516930ac0d4483b6dd9fd46eb69a7daac6
MD5 b47aa2a208cdc8a6a3f4a00da430ffc1
SHA1 0c564b515c9e79332d8e894b73e09c6584050481
SHA512 7dae2f730d770ca3dcc342c95b7b9dbe2804371c9a50ae7de83402e0ffa3cb5a9169494f5e3d749ab810af8e64f5bd36adbb9011028a50c508a7ed9319505ced
SSDEEP 12288:SYmIjEA0GUXUBtJACRpxOPafIW7guzPMiFEBwMvSktTQADKGph2rsligt:uA00t/px5fIW7guzjGB7HtTlK7/g
TLSH
T1B9E4236CB582D132CA95CE3B4718C6A4493939326664C94F3BEC2F7D1F51348C26A7BE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-11_b47aa2a208cdc8a6a3f4a00da430ffc1_elex_redline-stealer_rhadamanthys_stealc_stop.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

14 signatures

150 seconds

discovery ransomware spyware stealer

Behavioral task

behavioral2

Sample

2026-07-11_b47aa2a208cdc8a6a3f4a00da430ffc1_elex_redline-stealer_rhadamanthys_stealc_stop.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

discovery ransomware spyware stealer

Malware Config

Targets

- Target
  2026-07-11_b47aa2a208cdc8a6a3f4a00da430ffc1_elex_redline-stealer_rhadamanthys_stealc_stop
- Size 663KB
- SHA256 fca14d9c6079407bca57d45f7aa707516930ac0d4483b6dd9fd46eb69a7daac6
- MD5 b47aa2a208cdc8a6a3f4a00da430ffc1
- SHA1 0c564b515c9e79332d8e894b73e09c6584050481
- SHA512 7dae2f730d770ca3dcc342c95b7b9dbe2804371c9a50ae7de83402e0ffa3cb5a9169494f5e3d749ab810af8e64f5bd36adbb9011028a50c508a7ed9319505ced
- SSDEEP 12288:SYmIjEA0GUXUBtJACRpxOPafIW7guzPMiFEBwMvSktTQADKGph2rsligt:uA00t/px5fIW7guzjGB7HtTlK7/g
- TLSH
  T1B9E4236CB582D132CA95CE3B4718C6A4493939326664C94F3BEC2F7D1F51348C26A7BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomwarespywarestealer

behavioral2

discoveryransomwarespywarestealer

© 2018-2026

Terms | Privacy