General
- Target 2026-07-29_f536f5a9a80ea513fdc2d9b448d9c111_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- Sample260729-se64xsac45
- SHA256 015d9c0249a7f4dc32d8be2d17c91f930b57935459539b7fc6b6e2dbeb9a42c2
- MD5 f536f5a9a80ea513fdc2d9b448d9c111
- SHA1 bb2840619894dbbd2a1725e18fee9783526c4996
- SHA512 11a966dfadc220a5e6a3edcb44d190789f7a984e7a99e4e312849e1843f23722ddabc013233fd7a1c1ecc35cd44f028165953385eeb91e67ddb8b90a88919e45
- SSDEEP 24576:3u66M3GSPqT7PX5UM9uIpTAYVBlTi8M7egu4mctco0+:3f2SiTDuIuImYW78R
- TLSH T124F41265B181C072E57B107145B8CA71097E7D3A59B0404F2BEE3A794EB33E0466EBAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_f536f5a9a80ea513fdc2d9b448d9c111_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_f536f5a9a80ea513fdc2d9b448d9c111_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_f536f5a9a80ea513fdc2d9b448d9c111_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- SHA256 015d9c0249a7f4dc32d8be2d17c91f930b57935459539b7fc6b6e2dbeb9a42c2
- MD5 f536f5a9a80ea513fdc2d9b448d9c111
- SHA1 bb2840619894dbbd2a1725e18fee9783526c4996
- SHA512 11a966dfadc220a5e6a3edcb44d190789f7a984e7a99e4e312849e1843f23722ddabc013233fd7a1c1ecc35cd44f028165953385eeb91e67ddb8b90a88919e45
- SSDEEP 24576:3u66M3GSPqT7PX5UM9uIpTAYVBlTi8M7egu4mctco0+:3f2SiTDuIuImYW78R
- TLSH T124F41265B181C072E57B107145B8CA71097E7D3A59B0404F2BEE3A794EB33E0466EBAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1