General
- Target 2026-07-17_8cb22fda79e2629293fba59708ef1d66_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260717-xff2cafs3t
- SHA256 2327198ec9b0010a560bbce2dbe1001c0a2051082abbbad52afd42b8a10ca635
- MD5 8cb22fda79e2629293fba59708ef1d66
- SHA1 1f55e4b148ba204731c567cd191010025e800abc
- SHA512 7b23a786722103739a847007cbde4b5ee88b08970d3ae9275b28e5b83154a68269334a82c7f4561b953136ae4639c9273da9cf715e387c54f73ab666fb847bfd
- SSDEEP 3072:vJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:vghLQ0sQmpcF8BzXfwVfAI
- TLSH T169344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_8cb22fda79e2629293fba59708ef1d66_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-07-17_8cb22fda79e2629293fba59708ef1d66_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 2327198ec9b0010a560bbce2dbe1001c0a2051082abbbad52afd42b8a10ca635
- MD5 8cb22fda79e2629293fba59708ef1d66
- SHA1 1f55e4b148ba204731c567cd191010025e800abc
- SHA512 7b23a786722103739a847007cbde4b5ee88b08970d3ae9275b28e5b83154a68269334a82c7f4561b953136ae4639c9273da9cf715e387c54f73ab666fb847bfd
- SSDEEP 3072:vJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:vghLQ0sQmpcF8BzXfwVfAI
- TLSH T169344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE