General
- Target 2026-07-21_87445b7204215d79ea9bcc5e2505d0fc_elex_redline-stealer_rhadamanthys_stealc_stop
- Size 667KB
- Sample260721-c1ry5aes4t
- SHA256 b5052195646e54a555d2478f53c4bfa00eacbaade5ab7877f024fd0dabadf53b
- MD5 87445b7204215d79ea9bcc5e2505d0fc
- SHA1 38c7b4f473a96129418f2eb50c5a8450db5fc1b5
- SHA512 addc7bde57cf22beb1d895e0522849edbe950c1462f30505f79092f0a75df733b6b6bc91f7ecbde929fc4b58e939ddc2d9bbe8af932cb84c98dfe3a678748088
- SSDEEP 12288:CYmIjEYkTluow+JHIabtqlLNUohKbJKIJwQ9A2et2kFc67WPr2eXPXq+:+YkoofITNUohc3C5pPc66a0t
- TLSH T153E42361F252D432D8966835492CD2E19F7E59726A938D43F7C827AF9FB0384D32231B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_87445b7204215d79ea9bcc5e2505d0fc_elex_redline-stealer_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_87445b7204215d79ea9bcc5e2505d0fc_elex_redline-stealer_rhadamanthys_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_87445b7204215d79ea9bcc5e2505d0fc_elex_redline-stealer_rhadamanthys_stealc_stop
- Size 667KB
- SHA256 b5052195646e54a555d2478f53c4bfa00eacbaade5ab7877f024fd0dabadf53b
- MD5 87445b7204215d79ea9bcc5e2505d0fc
- SHA1 38c7b4f473a96129418f2eb50c5a8450db5fc1b5
- SHA512 addc7bde57cf22beb1d895e0522849edbe950c1462f30505f79092f0a75df733b6b6bc91f7ecbde929fc4b58e939ddc2d9bbe8af932cb84c98dfe3a678748088
- SSDEEP 12288:CYmIjEYkTluow+JHIabtqlLNUohKbJKIJwQ9A2et2kFc67WPr2eXPXq+:+YkoofITNUohc3C5pPc66a0t
- TLSH T153E42361F252D432D8966835492CD2E19F7E59726A938D43F7C827AF9FB0384D32231B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1