General
- Target 2026-07-17_a1c6f808eea19dd29c1220ea326a08ed_elex_redline-stealer_rhadamanthys_stop
- Size 632KB
- Sample260718-c68h3ahs9t
- SHA256 9ed11cefc0fdb22014cec8408ac690429800054b7507708b80419202b142b336
- MD5 a1c6f808eea19dd29c1220ea326a08ed
- SHA1 215397ffc06cc6df47fef2212c274e853b1f4afc
- SHA512 54190e8849a7c61bb3da9a6e47658b92b852cf09d5eb0e6086a3b14e2cdc596dcc547c5dcf5f98f9bcfbcf0df402be17decdc8c73af75bb7dc1ea2354689a480
- SSDEEP 12288:H6wXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:awsqjnhMgeiCl7G0nehbGZpbD
- TLSH T16ED42276B544D0B3C41614B982ADD275AC2B7D7265304883BB972EBFEF712D08B3E11A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_a1c6f808eea19dd29c1220ea326a08ed_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_a1c6f808eea19dd29c1220ea326a08ed_elex_redline-stealer_rhadamanthys_stop
- Size 632KB
- SHA256 9ed11cefc0fdb22014cec8408ac690429800054b7507708b80419202b142b336
- MD5 a1c6f808eea19dd29c1220ea326a08ed
- SHA1 215397ffc06cc6df47fef2212c274e853b1f4afc
- SHA512 54190e8849a7c61bb3da9a6e47658b92b852cf09d5eb0e6086a3b14e2cdc596dcc547c5dcf5f98f9bcfbcf0df402be17decdc8c73af75bb7dc1ea2354689a480
- SSDEEP 12288:H6wXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:awsqjnhMgeiCl7G0nehbGZpbD
- TLSH T16ED42276B544D0B3C41614B982ADD275AC2B7D7265304883BB972EBFEF712D08B3E11A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1