General
- Target 2026-07-12_0aacc473f1badd274f8e88a4b5a1a4f9_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- Sample260712-rrmelsdw5x
- SHA256 a8a4453890d2e5c6ceadea01503c0f13cfc5f14ea60811ebc85d3e443eed4da5
- MD5 0aacc473f1badd274f8e88a4b5a1a4f9
- SHA1 143f1232f35ed64265bb38ece084569534273ecd
- SHA512 842a497fc5b91002c41c92ddc9f3fe9a7fcfef596426e62fe5c7550905b76126e195a002cd85081d5002dabf71e80051ed82d04297a65c5d91b33152078c6ff8
- SSDEEP 24576:Ru63p3KS1MT7LwpCw8jeqmRI+8IPZr6rw:RJ6SGT4pCZqmzUZr68
- TLSH T1C6F41222B1C0E0B2C1671535D5E4DEA14EBA3D7F5960841F63ED3A390F723E1466AB8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_0aacc473f1badd274f8e88a4b5a1a4f9_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_0aacc473f1badd274f8e88a4b5a1a4f9_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_0aacc473f1badd274f8e88a4b5a1a4f9_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- SHA256 a8a4453890d2e5c6ceadea01503c0f13cfc5f14ea60811ebc85d3e443eed4da5
- MD5 0aacc473f1badd274f8e88a4b5a1a4f9
- SHA1 143f1232f35ed64265bb38ece084569534273ecd
- SHA512 842a497fc5b91002c41c92ddc9f3fe9a7fcfef596426e62fe5c7550905b76126e195a002cd85081d5002dabf71e80051ed82d04297a65c5d91b33152078c6ff8
- SSDEEP 24576:Ru63p3KS1MT7LwpCw8jeqmRI+8IPZr6rw:RJ6SGT4pCZqmzUZr68
- TLSH T1C6F41222B1C0E0B2C1671535D5E4DEA14EBA3D7F5960841F63ED3A390F723E1466AB8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1