General
- Target 2026-07-29_2ae993d1ac7873fe33176d309abe5a08_elex_redline-stealer_rhadamanthys_stop_swisyn_tofsee
- Size 2.6MB
- Sample260729-kgmt3afc52
- SHA256 346581c2294d29c9d42dfedafabe2647b1cdd239079fce9fe288cf3cdf17b4b0
- MD5 2ae993d1ac7873fe33176d309abe5a08
- SHA1 b16dfe2858f5a41bb3c8a61e965fc424941a196b
- SHA512 c20f49cd047de161a49aa5f0b08462c819259de141f8cb6512e42d93f2afd0d9f2555275374ab20bf5ad8b003f67d2f0a267ac90f4425dd3084273b2481e90e4
- SSDEEP 49152:t1mTRR0i90cyIw/wj3ka4NSV9dvLWqbURdk/qy3pvY2dPLUBIIOpyZP1Qp5:vo0i90TIc4UJSpvLWdQZ3pvtdPw2IOp/
- TLSH T150D523337F80D07BD81586F148A1863ABA35BE370B909E8B72557B181BB12977DB434B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_2ae993d1ac7873fe33176d309abe5a08_elex_redline-stealer_rhadamanthys_stop_swisyn_tofsee.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_2ae993d1ac7873fe33176d309abe5a08_elex_redline-stealer_rhadamanthys_stop_swisyn_tofsee.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_2ae993d1ac7873fe33176d309abe5a08_elex_redline-stealer_rhadamanthys_stop_swisyn_tofsee
- Size 2.6MB
- SHA256 346581c2294d29c9d42dfedafabe2647b1cdd239079fce9fe288cf3cdf17b4b0
- MD5 2ae993d1ac7873fe33176d309abe5a08
- SHA1 b16dfe2858f5a41bb3c8a61e965fc424941a196b
- SHA512 c20f49cd047de161a49aa5f0b08462c819259de141f8cb6512e42d93f2afd0d9f2555275374ab20bf5ad8b003f67d2f0a267ac90f4425dd3084273b2481e90e4
- SSDEEP 49152:t1mTRR0i90cyIw/wj3ka4NSV9dvLWqbURdk/qy3pvY2dPLUBIIOpyZP1Qp5:vo0i90TIc4UJSpvLWdQZ3pvtdPw2IOp/
- TLSH T150D523337F80D07BD81586F148A1863ABA35BE370B909E8B72557B181BB12977DB434B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2