General
- Target 2026-07-16_01104bdaaf315d98cbdd2965ae458165_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260716-qf96vsd19m
- SHA256 ff9218e919f40380a9d67f521cacbe6a795608173e87cfe3004d2ca917760217
- MD5 01104bdaaf315d98cbdd2965ae458165
- SHA1 d0afea1b88c2b4524145085999d59becabf7696f
- SHA512 580c3cf3ca37a65645f17eeee588a7ed206e2713b36192d5690418771442f832fa745d2e276f5c3b0738eab30814e51d082075fd705c4e4665aaa1a4eb70b87e
- SSDEEP 3072:nJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:nghLQ0sQmpcF8BzXfwVfAI
- TLSH T1E2344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-16_01104bdaaf315d98cbdd2965ae458165_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-07-16_01104bdaaf315d98cbdd2965ae458165_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 ff9218e919f40380a9d67f521cacbe6a795608173e87cfe3004d2ca917760217
- MD5 01104bdaaf315d98cbdd2965ae458165
- SHA1 d0afea1b88c2b4524145085999d59becabf7696f
- SHA512 580c3cf3ca37a65645f17eeee588a7ed206e2713b36192d5690418771442f832fa745d2e276f5c3b0738eab30814e51d082075fd705c4e4665aaa1a4eb70b87e
- SSDEEP 3072:nJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:nghLQ0sQmpcF8BzXfwVfAI
- TLSH T1E2344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL