General
- Target 2026-07-20_56ceeb3dd73bf3f11f22a7da9f28a807_elex_redline-stealer_rhadamanthys_stealc_stop
- Size 667KB
- Sample260720-dm6e2ags4x
- SHA256 66438d80273f7dbb481fc25ab81f939ba05db4b0400bf0d021e7a07ac9799be2
- MD5 56ceeb3dd73bf3f11f22a7da9f28a807
- SHA1 e0ce6e7a06c95f15887e047e76daeb90c15a15a1
- SHA512 07b9e16845b247646ffecb1ea2c65c3abe5c5c78a12266c28915f34b1dbc723bf0b8ddb18894680057c0ee82e87cddf5ef5dca87bc83507f31b1849aa9acb20f
- SSDEEP 12288:CYmIjEtozNuZPBasaU5MFL9eUx0Ervwj+gAw3ABuHTKab462WjJdK7:+t/PBasaU5oL9eJwoz3lYjWNdK7
- TLSH T177E4227A7B52C871CC991475520DCBB58F3A3C7120AA950BB6CC5B1B6E707F2E70862B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_56ceeb3dd73bf3f11f22a7da9f28a807_elex_redline-stealer_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_56ceeb3dd73bf3f11f22a7da9f28a807_elex_redline-stealer_rhadamanthys_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_56ceeb3dd73bf3f11f22a7da9f28a807_elex_redline-stealer_rhadamanthys_stealc_stop
- Size 667KB
- SHA256 66438d80273f7dbb481fc25ab81f939ba05db4b0400bf0d021e7a07ac9799be2
- MD5 56ceeb3dd73bf3f11f22a7da9f28a807
- SHA1 e0ce6e7a06c95f15887e047e76daeb90c15a15a1
- SHA512 07b9e16845b247646ffecb1ea2c65c3abe5c5c78a12266c28915f34b1dbc723bf0b8ddb18894680057c0ee82e87cddf5ef5dca87bc83507f31b1849aa9acb20f
- SSDEEP 12288:CYmIjEtozNuZPBasaU5MFL9eUx0Ervwj+gAw3ABuHTKab462WjJdK7:+t/PBasaU5oL9eJwoz3lYjWNdK7
- TLSH T177E4227A7B52C871CC991475520DCBB58F3A3C7120AA950BB6CC5B1B6E707F2E70862B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1