General
- Target 2026-07-15_4747ebe3c86089d6124b40e70481c356_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260715-vpbrwads2v
- SHA256 4a5ec21ba65e7200ab82e435dd918e245bac5974814ef30bbcf47c67efccb121
- MD5 4747ebe3c86089d6124b40e70481c356
- SHA1 ab36af11b68ef51416c8e75d930c248bbae27877
- SHA512 ac6c7d53237058c27e9cba10a28d6163107b8bc685f038210899308637e69ab6755d3141212a3465f5f77f3d8ccaa947eab0b9e20e8d4dfe689f41deb7fb87a9
- SSDEEP 3072:mJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:mghLQ0sQmpcF8BzXfwVfAI
- TLSH T1AE344A1272808071E7550B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_4747ebe3c86089d6124b40e70481c356_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_4747ebe3c86089d6124b40e70481c356_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-07-15_4747ebe3c86089d6124b40e70481c356_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 4a5ec21ba65e7200ab82e435dd918e245bac5974814ef30bbcf47c67efccb121
- MD5 4747ebe3c86089d6124b40e70481c356
- SHA1 ab36af11b68ef51416c8e75d930c248bbae27877
- SHA512 ac6c7d53237058c27e9cba10a28d6163107b8bc685f038210899308637e69ab6755d3141212a3465f5f77f3d8ccaa947eab0b9e20e8d4dfe689f41deb7fb87a9
- SSDEEP 3072:mJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:mghLQ0sQmpcF8BzXfwVfAI
- TLSH T1AE344A1272808071E7550B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE