General
- Target 2026-07-15_506ec49fcfd3dedc998691c67fb4678b_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260715-vmwz2ac16s
- SHA256 6b89e884679e3a59f27ba28fc10861f8ec499efa4823c53d7263537cb4e363c2
- MD5 506ec49fcfd3dedc998691c67fb4678b
- SHA1 d6b0586ce6bbdd69867306090f8dae1ca584f6ea
- SHA512 6e6432d179d94485f3cb42178367b57cb31b80ad2004a08cc6ddad27dfe971348687b0effdc4f7f03fd40e26d1000f1704cc2fe5786a20018bd7062f641f252a
- SSDEEP 3072:gJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:gghLQ0sQmpcF8BzXfwVfAI
- TLSH T164344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_506ec49fcfd3dedc998691c67fb4678b_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_506ec49fcfd3dedc998691c67fb4678b_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-07-15_506ec49fcfd3dedc998691c67fb4678b_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 6b89e884679e3a59f27ba28fc10861f8ec499efa4823c53d7263537cb4e363c2
- MD5 506ec49fcfd3dedc998691c67fb4678b
- SHA1 d6b0586ce6bbdd69867306090f8dae1ca584f6ea
- SHA512 6e6432d179d94485f3cb42178367b57cb31b80ad2004a08cc6ddad27dfe971348687b0effdc4f7f03fd40e26d1000f1704cc2fe5786a20018bd7062f641f252a
- SSDEEP 3072:gJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:gghLQ0sQmpcF8BzXfwVfAI
- TLSH T164344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE