General
- Target 2026-07-20_0db50c2c4b6e7d3d47e9c3f7d51d9ca0_elex_redline-stealer_rhadamanthys_stop
- Size 1.4MB
- Sample260720-tr5mashx5y
- SHA256 672f883d9df4a7932b2f1ee8504bac5e76530b5ecd93860aad2ba57411388682
- MD5 0db50c2c4b6e7d3d47e9c3f7d51d9ca0
- SHA1 7c19b7e58de6a0d7ad68738d029ab6f9bc9319a4
- SHA512 232eed5f2e22efd4b40bb6aa43832fb8048127a44538644bb532da54c7d56178be05935686ca45679cb307faad9c4a160c970e601efd9d4c4bc2f75d5ba4ee4c
- SSDEEP 12288:x6E+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpG7:4Eyxknw4FYnshx8OfVe247
- TLSH T1CB65237876C2D0B2D44910730A29D3B16B2BB8716675C147FBAA777FEA704D0E22E217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_0db50c2c4b6e7d3d47e9c3f7d51d9ca0_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_0db50c2c4b6e7d3d47e9c3f7d51d9ca0_elex_redline-stealer_rhadamanthys_stop
- Size 1.4MB
- SHA256 672f883d9df4a7932b2f1ee8504bac5e76530b5ecd93860aad2ba57411388682
- MD5 0db50c2c4b6e7d3d47e9c3f7d51d9ca0
- SHA1 7c19b7e58de6a0d7ad68738d029ab6f9bc9319a4
- SHA512 232eed5f2e22efd4b40bb6aa43832fb8048127a44538644bb532da54c7d56178be05935686ca45679cb307faad9c4a160c970e601efd9d4c4bc2f75d5ba4ee4c
- SSDEEP 12288:x6E+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpG7:4Eyxknw4FYnshx8OfVe247
- TLSH T1CB65237876C2D0B2D44910730A29D3B16B2BB8716675C147FBAA777FEA704D0E22E217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1