General
- Target 2026-07-14_88b4e78c46d58e198618ec07b99aea3e_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260714-p196xsds6m
- SHA256 a13d9631fcb10fa591bf38db96e344448e10b6c481d7c5d0c20c451b2c1bdf03
- MD5 88b4e78c46d58e198618ec07b99aea3e
- SHA1 a0ef7d3b3716afa8f2fcc71997d89710656f3289
- SHA512 dc2dcdb0691a712b8f7d36e146b0aae1741cbcda5abd0b2df6a9dae463833e0d56edc0ea17ebb34fef4407ad1e8442eef15e85b4f081c4707e9e1d79a6e8bca0
- SSDEEP 3072:mJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:mghLQ0sQmpcF8BzXfwVfAI
- TLSH T116344A1272808071E7550B78046AE7A14A7E7D344BA5E68FF7A43F7A5E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-14_88b4e78c46d58e198618ec07b99aea3e_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-07-14_88b4e78c46d58e198618ec07b99aea3e_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 a13d9631fcb10fa591bf38db96e344448e10b6c481d7c5d0c20c451b2c1bdf03
- MD5 88b4e78c46d58e198618ec07b99aea3e
- SHA1 a0ef7d3b3716afa8f2fcc71997d89710656f3289
- SHA512 dc2dcdb0691a712b8f7d36e146b0aae1741cbcda5abd0b2df6a9dae463833e0d56edc0ea17ebb34fef4407ad1e8442eef15e85b4f081c4707e9e1d79a6e8bca0
- SSDEEP 3072:mJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:mghLQ0sQmpcF8BzXfwVfAI
- TLSH T116344A1272808071E7550B78046AE7A14A7E7D344BA5E68FF7A43F7A5E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE