General
- Target 2026-07-20_2f877aae5e2d2b08c82bbcdc2e67b9a9_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 766KB
- Sample260720-dwlrzsdx8p
- SHA256 fe8e74de66a255e82c1a6a45724fa112d601668ab72704f68794f9e3720dc629
- MD5 2f877aae5e2d2b08c82bbcdc2e67b9a9
- SHA1 205b4b6124a5c9fa09ff77c8cc34b49e74402e91
- SHA512 a57da3846d2a8bc40d08de0d04401f11715cf3b8dd16df98b20c5a33a9be7693aba0839d2af56b993ffbb570e03fbf13348f323fb303a7ad05ed3ac0ff211d10
- SSDEEP 12288:iA26CQssKdlgkCTOoTtvktpVzbsVSjcrFCeoQ83J1+WevqmLzUqSer:id6UdvCT7TetpBbsVLFdoQ8b5CqmLYq
- TLSH T1FAF41271F280E071D467107291F4CF704AB97E7AA6A0445F2BED7A291E737E18128B9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_2f877aae5e2d2b08c82bbcdc2e67b9a9_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_2f877aae5e2d2b08c82bbcdc2e67b9a9_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_2f877aae5e2d2b08c82bbcdc2e67b9a9_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 766KB
- SHA256 fe8e74de66a255e82c1a6a45724fa112d601668ab72704f68794f9e3720dc629
- MD5 2f877aae5e2d2b08c82bbcdc2e67b9a9
- SHA1 205b4b6124a5c9fa09ff77c8cc34b49e74402e91
- SHA512 a57da3846d2a8bc40d08de0d04401f11715cf3b8dd16df98b20c5a33a9be7693aba0839d2af56b993ffbb570e03fbf13348f323fb303a7ad05ed3ac0ff211d10
- SSDEEP 12288:iA26CQssKdlgkCTOoTtvktpVzbsVSjcrFCeoQ83J1+WevqmLzUqSer:id6UdvCT7TetpBbsVLFdoQ8b5CqmLYq
- TLSH T1FAF41271F280E071D467107291F4CF704AB97E7AA6A0445F2BED7A291E737E18128B9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1