General
- Target 2026-07-21_091ceda56311aafdb1482719e4e45b18_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 766KB
- Sample260721-depsbads4l
- SHA256 06ebe2d383d46faf635c2051f9da054b3e6d13c659a45e980c6363f3666bc312
- MD5 091ceda56311aafdb1482719e4e45b18
- SHA1 20bd5495777e368636ca212890f900389354b460
- SHA512 340b0ba6c4366a108744a76e36f3e3445600f70e2bec3d4956e615953817aa17ea039c773425c721865d54b16ad6ee1679e537e0d237871b35eca23bac676535
- SSDEEP 12288:Htg6jsYgv3zdXS7m4Txv9gWOyEpulgXWBqAXjqF4myKbXP2KQCY6jd1vkMadC6x+:Hu6vS39S7DT7gWLEkgXWHiYKbfZB1v31
- TLSH T14CF41222B180D072D6A3547186B5CEB11AB93CBE4A60544F6BFD387A1FB23D2465D38F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_091ceda56311aafdb1482719e4e45b18_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_091ceda56311aafdb1482719e4e45b18_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 766KB
- SHA256 06ebe2d383d46faf635c2051f9da054b3e6d13c659a45e980c6363f3666bc312
- MD5 091ceda56311aafdb1482719e4e45b18
- SHA1 20bd5495777e368636ca212890f900389354b460
- SHA512 340b0ba6c4366a108744a76e36f3e3445600f70e2bec3d4956e615953817aa17ea039c773425c721865d54b16ad6ee1679e537e0d237871b35eca23bac676535
- SSDEEP 12288:Htg6jsYgv3zdXS7m4Txv9gWOyEpulgXWBqAXjqF4myKbXP2KQCY6jd1vkMadC6x+:Hu6vS39S7DT7gWLEkgXWHiYKbfZB1v31
- TLSH T14CF41222B180D072D6A3547186B5CEB11AB93CBE4A60544F6BFD387A1FB23D2465D38F
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1