General
- Target 2026-07-20_bf0e3079f0963894b62e04ca6fa4fa22_elex_redline-stealer_rhadamanthys_stealc_stop
- Size 663KB
- Sample260720-c4b23sfv3z
- SHA256 959fafeae2ef6702cb76bb69524b6b1f1529520e42bc41eaaccce931d4ffe19f
- MD5 bf0e3079f0963894b62e04ca6fa4fa22
- SHA1 b4179896bd3db2b20692443345e64b0ee662d595
- SHA512 6e97eb0f07a01ee4bc413eb348d2a888662959e393063d5fb0e5602d8e562e30cc7c38def397c6b8e11e8c30a26c72fab72426dba23e17285811b286f1168d30
- SSDEEP 12288:4YmIjEXWzAMKcRzQgZ0ypqf9rYthKQipc4Ct9D8NyNzjSeUcd/M/lI3owRswsKF:YXWzASRHZ0ypyuJ+iC/lI3owRxsc
- TLSH T1DAE42235B16080BEC5CAEE356A34CAF05D3B14B09C75AA47B7349727CF62AC4DA29317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_bf0e3079f0963894b62e04ca6fa4fa22_elex_redline-stealer_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_bf0e3079f0963894b62e04ca6fa4fa22_elex_redline-stealer_rhadamanthys_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_bf0e3079f0963894b62e04ca6fa4fa22_elex_redline-stealer_rhadamanthys_stealc_stop
- Size 663KB
- SHA256 959fafeae2ef6702cb76bb69524b6b1f1529520e42bc41eaaccce931d4ffe19f
- MD5 bf0e3079f0963894b62e04ca6fa4fa22
- SHA1 b4179896bd3db2b20692443345e64b0ee662d595
- SHA512 6e97eb0f07a01ee4bc413eb348d2a888662959e393063d5fb0e5602d8e562e30cc7c38def397c6b8e11e8c30a26c72fab72426dba23e17285811b286f1168d30
- SSDEEP 12288:4YmIjEXWzAMKcRzQgZ0ypqf9rYthKQipc4Ct9D8NyNzjSeUcd/M/lI3owRswsKF:YXWzASRHZ0ypyuJ+iC/lI3owRxsc
- TLSH T1DAE42235B16080BEC5CAEE356A34CAF05D3B14B09C75AA47B7349727CF62AC4DA29317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1