General
- Target 2026-08-02_3c9f9bad4e170ea1c458473b7f26230f_elex_redline-stealer_rhadamanthys_stop
- Size 632KB
- Sample260803-awk9nsvdqh
- SHA256 ec4ca3849ec27581a5fbd20cb14523e9ec2a912dce9095fea743cce1a976653c
- MD5 3c9f9bad4e170ea1c458473b7f26230f
- SHA1 8be4253d1ed20537230c5759283c822a31311299
- SHA512 b37991b7ffe3c814e5e35908df04632c4d1a1c545a177d7df2dc265fa3b17a7eab54bb6e7a2e03cb6030fdddc949ac93f32481281ddf723b7a1f8dc681d61860
- SSDEEP 12288:35SZ52OFW61fv9HfmwPMKM4qJUjTX16hbxs7krmFnzEUrHe/nTNAvBg:pSj9FWM170KLX1GbKIaFzErn2Jg
- TLSH T1AED423707602C0F1D92A61354925D2A28F2F7D7273754D87768B2ABB9E38353CB227A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_3c9f9bad4e170ea1c458473b7f26230f_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_3c9f9bad4e170ea1c458473b7f26230f_elex_redline-stealer_rhadamanthys_stop
- Size 632KB
- SHA256 ec4ca3849ec27581a5fbd20cb14523e9ec2a912dce9095fea743cce1a976653c
- MD5 3c9f9bad4e170ea1c458473b7f26230f
- SHA1 8be4253d1ed20537230c5759283c822a31311299
- SHA512 b37991b7ffe3c814e5e35908df04632c4d1a1c545a177d7df2dc265fa3b17a7eab54bb6e7a2e03cb6030fdddc949ac93f32481281ddf723b7a1f8dc681d61860
- SSDEEP 12288:35SZ52OFW61fv9HfmwPMKM4qJUjTX16hbxs7krmFnzEUrHe/nTNAvBg:pSj9FWM170KLX1GbKIaFzErn2Jg
- TLSH T1AED423707602C0F1D92A61354925D2A28F2F7D7273754D87768B2ABB9E38353CB227A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1