General
- Target 2026-07-23_0d45d9fd847132aa89a5d025550d605d_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260723-ncppmscc66
- SHA256 b0c387f6479901103770889aa72dfcaabc74b825e1962c3841646c99744a0216
- MD5 0d45d9fd847132aa89a5d025550d605d
- SHA1 7d02e6762919103a647ba41307e47c14f483e156
- SHA512 45af3c23b0ede577c3d3014bf122ddb82149d8e85d82907cfe62bb27d003ce08d555f7ea853b393e68ba43cb854de31350c36a168f5f25da92ead83b6ded087f
- SSDEEP 3072:KJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkQI9:KghLQ0sQmpcF8BzXfwVfQI
- TLSH T179344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-23_0d45d9fd847132aa89a5d025550d605d_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-07-23_0d45d9fd847132aa89a5d025550d605d_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 b0c387f6479901103770889aa72dfcaabc74b825e1962c3841646c99744a0216
- MD5 0d45d9fd847132aa89a5d025550d605d
- SHA1 7d02e6762919103a647ba41307e47c14f483e156
- SHA512 45af3c23b0ede577c3d3014bf122ddb82149d8e85d82907cfe62bb27d003ce08d555f7ea853b393e68ba43cb854de31350c36a168f5f25da92ead83b6ded087f
- SSDEEP 3072:KJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkQI9:KghLQ0sQmpcF8BzXfwVfQI
- TLSH T179344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE