General
- Target 2026-07-17_831d809278e1ac8a308c1904e8858bee_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- Sample260718-dm16baet4p
- SHA256 f7c2dc50cd6fe3c0dc66321d6d5d90280824eff50557177a547c228eaae59929
- MD5 831d809278e1ac8a308c1904e8858bee
- SHA1 d306d1142a1a78c3b4a82056aa61bc05eae85894
- SHA512 3940ef53c3e6c60dcee51167a7ca82eef9ddd2b748b9513e8c0bcf78e9588a2e6cc448fa324b2657f5a44b53303c0ba7772046e5318570afd1c533a320ba5711
- SSDEEP 12288:SA26p5sGKelgVCcJoTtvkXDpi2S4qSf/3fMfUBvF1b8Hw4ayTAnZXJaIW5ltgsb5:Sd6Ie6CcuTeXqSXvpxb8HXKHMfshoT
- TLSH T1F5F412217280C0B3E1A7117295F1CBB14AB9BC396970440F6BEE797D1F727E081997AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_831d809278e1ac8a308c1904e8858bee_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_831d809278e1ac8a308c1904e8858bee_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_831d809278e1ac8a308c1904e8858bee_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- SHA256 f7c2dc50cd6fe3c0dc66321d6d5d90280824eff50557177a547c228eaae59929
- MD5 831d809278e1ac8a308c1904e8858bee
- SHA1 d306d1142a1a78c3b4a82056aa61bc05eae85894
- SHA512 3940ef53c3e6c60dcee51167a7ca82eef9ddd2b748b9513e8c0bcf78e9588a2e6cc448fa324b2657f5a44b53303c0ba7772046e5318570afd1c533a320ba5711
- SSDEEP 12288:SA26p5sGKelgVCcJoTtvkXDpi2S4qSf/3fMfUBvF1b8Hw4ayTAnZXJaIW5ltgsb5:Sd6Ie6CcuTeXqSXvpxb8HXKHMfshoT
- TLSH T1F5F412217280C0B3E1A7117295F1CBB14AB9BC396970440F6BEE797D1F727E081997AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1