General
- Target 2026-07-22_85963d4dd2957c883a92f233922dbe08_elex_mafia_redline-stealer_rhadamanthys_stealc_stop_tofsee
- Size 1.7MB
- Sample260722-ghbawazbmg
- SHA256 3a10f835358af72bab7e7cb2fef07b4e4b7d239f45d99aacc4eac331abcbf79d
- MD5 85963d4dd2957c883a92f233922dbe08
- SHA1 7766d3087d3c8ddec7664ca54e63446f7da31740
- SHA512 1bf8d0917ee40de10321bb0743c2b6ebae27b3980ea48c76f39313ea081b331693fff13f224a7439b5d3fb82896673f8590f95446a86779ecf1e1350bd96b8da
- SSDEEP 3072:+6LC+FNu6RzLI3Kc70WYEn2/rQ2uEXDJOxviwYS1ASspHrGu6xHDYpegNfjyt4:fLpFNu6RzYT0m2qCDJ6tYS1AZ6Cphfm
- TLSH T16E85AE2172D08072E1A32175C8EAFAB40E7A7D6547E165DF2BD81E7F3E246D2963430E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_85963d4dd2957c883a92f233922dbe08_elex_mafia_redline-stealer_rhadamanthys_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_85963d4dd2957c883a92f233922dbe08_elex_mafia_redline-stealer_rhadamanthys_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_85963d4dd2957c883a92f233922dbe08_elex_mafia_redline-stealer_rhadamanthys_stealc_stop_tofsee
- Size 1.7MB
- SHA256 3a10f835358af72bab7e7cb2fef07b4e4b7d239f45d99aacc4eac331abcbf79d
- MD5 85963d4dd2957c883a92f233922dbe08
- SHA1 7766d3087d3c8ddec7664ca54e63446f7da31740
- SHA512 1bf8d0917ee40de10321bb0743c2b6ebae27b3980ea48c76f39313ea081b331693fff13f224a7439b5d3fb82896673f8590f95446a86779ecf1e1350bd96b8da
- SSDEEP 3072:+6LC+FNu6RzLI3Kc70WYEn2/rQ2uEXDJOxviwYS1ASspHrGu6xHDYpegNfjyt4:fLpFNu6RzYT0m2qCDJ6tYS1AZ6Cphfm
- TLSH T16E85AE2172D08072E1A32175C8EAFAB40E7A7D6547E165DF2BD81E7F3E246D2963430E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory