General
- Target 2026-07-14_c09a6bd104e8476af0bd22792e49a903_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260714-w71z6abs2q
- SHA256 fac8d70dbcb22a5e71146946380cfe9de7567580100cea38fc2632322be464cc
- MD5 c09a6bd104e8476af0bd22792e49a903
- SHA1 65892c44de4fb24381dfc88e0498d45de6640d92
- SHA512 1d4177f2649c550d20b9fa26daa92144088c249e64961694a9780a99d6d50e65ede47996ba557010aae7bc1d8514f7b93393afca1aa129a675be1d9dd353a4bb
- SSDEEP 3072:7JWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:7ghLQ0sQmpcF8BzXfwVfAI
- TLSH T152344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-14_c09a6bd104e8476af0bd22792e49a903_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-07-14_c09a6bd104e8476af0bd22792e49a903_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 fac8d70dbcb22a5e71146946380cfe9de7567580100cea38fc2632322be464cc
- MD5 c09a6bd104e8476af0bd22792e49a903
- SHA1 65892c44de4fb24381dfc88e0498d45de6640d92
- SHA512 1d4177f2649c550d20b9fa26daa92144088c249e64961694a9780a99d6d50e65ede47996ba557010aae7bc1d8514f7b93393afca1aa129a675be1d9dd353a4bb
- SSDEEP 3072:7JWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:7ghLQ0sQmpcF8BzXfwVfAI
- TLSH T152344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE