General
- Target 2026-07-28_43763c9ef755c93ccbfc63f56e741dac_elex_redline-stealer_rhadamanthys_stop
- Size 632KB
- Sample260729-brscvsek2v
- SHA256 949581ba4dc6b618e5a8caa80ae4cb3b26c73c38235e3972128929fb7cab396a
- MD5 43763c9ef755c93ccbfc63f56e741dac
- SHA1 febaa6adf8e7d9cb4b8e601c6601768a88b7700f
- SHA512 87effe034e06572af9dba0ad0573b89940b6f0fc8f93f6ae15ed9915d340a358b9e7193fc212f1c99f603cd55d49918920950218d8201d2f0195dea4ed75dcf6
- SSDEEP 12288:V5nJNTpWSgN/wwRN0UL0G/TVOo3HC75nSE33b9YvFH:bndCN/j2GLl3iFSE33b9
- TLSH T16CD42260F9D1E032D05A8279066DCBB16B11FDF4A6358883AB821BFF5B387D4D23B156
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_43763c9ef755c93ccbfc63f56e741dac_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_43763c9ef755c93ccbfc63f56e741dac_elex_redline-stealer_rhadamanthys_stop
- Size 632KB
- SHA256 949581ba4dc6b618e5a8caa80ae4cb3b26c73c38235e3972128929fb7cab396a
- MD5 43763c9ef755c93ccbfc63f56e741dac
- SHA1 febaa6adf8e7d9cb4b8e601c6601768a88b7700f
- SHA512 87effe034e06572af9dba0ad0573b89940b6f0fc8f93f6ae15ed9915d340a358b9e7193fc212f1c99f603cd55d49918920950218d8201d2f0195dea4ed75dcf6
- SSDEEP 12288:V5nJNTpWSgN/wwRN0UL0G/TVOo3HC75nSE33b9YvFH:bndCN/j2GLl3iFSE33b9
- TLSH T16CD42260F9D1E032D05A8279066DCBB16B11FDF4A6358883AB821BFF5B387D4D23B156
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1