General
- Target 2026-07-17_e960c04c83e19d98ede97e2994fd5ac8_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260718-b2awkafy4z
- SHA256 fd9292ab60103b6528d1dc07e868d980c72e4b59b1428ea48c7a84f032206198
- MD5 e960c04c83e19d98ede97e2994fd5ac8
- SHA1 10e96bb5e14313ea1dcce788933c1cb3e39bed6c
- SHA512 c19d55eef7ecbd2f7b55b09cbc5dfadc203ab469ca6c79fe8c0c278dd9abc1dc36da1ecf4a210cc84b2eb5211f0cc8e7c411ac3987d18a0dd1fdf95f2aa48d1e
- SSDEEP 3072:ZJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:ZghLQ0sQmpcF8BzXfwVfAI
- TLSH T142344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_e960c04c83e19d98ede97e2994fd5ac8_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-07-17_e960c04c83e19d98ede97e2994fd5ac8_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 fd9292ab60103b6528d1dc07e868d980c72e4b59b1428ea48c7a84f032206198
- MD5 e960c04c83e19d98ede97e2994fd5ac8
- SHA1 10e96bb5e14313ea1dcce788933c1cb3e39bed6c
- SHA512 c19d55eef7ecbd2f7b55b09cbc5dfadc203ab469ca6c79fe8c0c278dd9abc1dc36da1ecf4a210cc84b2eb5211f0cc8e7c411ac3987d18a0dd1fdf95f2aa48d1e
- SSDEEP 3072:ZJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:ZghLQ0sQmpcF8BzXfwVfAI
- TLSH T142344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE