General
- Target 2026-07-15_602fd729d08b6e874d3d26932a2d6fa9_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- Sample260716-cazahsd171
- SHA256 cc3f49381883ff5e87f05ada2c41ef44be8db4fd59996779d7cfa9388c256f1b
- MD5 602fd729d08b6e874d3d26932a2d6fa9
- SHA1 dc5afd951807b49079f0cd396b2b84f9c1b139b7
- SHA512 8af95d14e4516bfcdecc82c61806cbf80ee58970a52e3c629cfa916276df01d5a9afa48ccbeab3cf792271aeea9aec58663bdb718f171cd525b7d3c0db2a83e7
- SSDEEP 12288:SA26pms0KdlgyCBxoTtvknP8F2fq7bjdlWGDJ1Ex4n29HofMDHIt00Aj:Sd6tdZCBGTenP8UqtlW8IK2Bof6U0nj
- TLSH T1AFF4121071C0D0B2D97B54B585BEDEB00DBA3D3A29B0845F37E87A690EB27D14168B9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_602fd729d08b6e874d3d26932a2d6fa9_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_602fd729d08b6e874d3d26932a2d6fa9_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_602fd729d08b6e874d3d26932a2d6fa9_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- SHA256 cc3f49381883ff5e87f05ada2c41ef44be8db4fd59996779d7cfa9388c256f1b
- MD5 602fd729d08b6e874d3d26932a2d6fa9
- SHA1 dc5afd951807b49079f0cd396b2b84f9c1b139b7
- SHA512 8af95d14e4516bfcdecc82c61806cbf80ee58970a52e3c629cfa916276df01d5a9afa48ccbeab3cf792271aeea9aec58663bdb718f171cd525b7d3c0db2a83e7
- SSDEEP 12288:SA26pms0KdlgyCBxoTtvknP8F2fq7bjdlWGDJ1Ex4n29HofMDHIt00Aj:Sd6tdZCBGTenP8UqtlW8IK2Bof6U0nj
- TLSH T1AFF4121071C0D0B2D97B54B585BEDEB00DBA3D3A29B0845F37E87A690EB27D14168B9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1