General
- Target 2026-07-24_d559f029e50e273dc174fa3b3abfcfb0_elex_redline-stealer_rhadamanthys_stop
- Size 1.3MB
- Sample260724-kr4wbsvyex
- SHA256 409eaccae0d0c26f6ae9e1140b3443857483b56df7f81081c19af56e8884fd2d
- MD5 d559f029e50e273dc174fa3b3abfcfb0
- SHA1 33f0dddd6bb4d7b7f983553ed4f92bc3a38d8e3c
- SHA512 29bea58340d84ffbacd2544eba09d7557ea4a2cd9e14cbe83fc0d93ed9174c3e2640d4e643103e118aef7e4c1b6543e333d47aad86d7bc3f969ea3e49616d1b2
- SSDEEP 12288:I6fiJw/9Rrw0R1u4V/0YG3wx6EcJHUEhPUotFZr+1izHGNe8jKk34z:5r/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz
- TLSH T1795522A27580D072D9BD003A4929C470AA5A6D38567688D3F3453F7FAB34BD2DF3E11A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_d559f029e50e273dc174fa3b3abfcfb0_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_d559f029e50e273dc174fa3b3abfcfb0_elex_redline-stealer_rhadamanthys_stop
- Size 1.3MB
- SHA256 409eaccae0d0c26f6ae9e1140b3443857483b56df7f81081c19af56e8884fd2d
- MD5 d559f029e50e273dc174fa3b3abfcfb0
- SHA1 33f0dddd6bb4d7b7f983553ed4f92bc3a38d8e3c
- SHA512 29bea58340d84ffbacd2544eba09d7557ea4a2cd9e14cbe83fc0d93ed9174c3e2640d4e643103e118aef7e4c1b6543e333d47aad86d7bc3f969ea3e49616d1b2
- SSDEEP 12288:I6fiJw/9Rrw0R1u4V/0YG3wx6EcJHUEhPUotFZr+1izHGNe8jKk34z:5r/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz
- TLSH T1795522A27580D072D9BD003A4929C470AA5A6D38567688D3F3453F7FAB34BD2DF3E11A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1