General
- Target 2026-08-06_263285638a0cb0ca9a63ff9af5f6a069_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- Sample260806-b79l3sfc29
- SHA256 1a67242859aec55bb68b6b76696948f95890718480f2b6820ca83c407d3440e3
- MD5 263285638a0cb0ca9a63ff9af5f6a069
- SHA1 b80c8a3b694602e24346d77e0228948d3ba6e36f
- SHA512 9a60d9080eaf4835a81d31d7ab338aa8b18c0f11f40eb8ee9f2072146ed119cbe9b366d629e6c3805d2fd07dd1880b71afb56594d38fb27e889bfdc97a527487
- SSDEEP 24576:3u6Kp32SXQT7uW0zn5AdlBQYyqSdq6hq+J22icDJ:3imSATSr5AtYdpOi
- TLSH T19EF41232B240D472D67B147246B8CFB149BA7C3E19B1940F67D879B91F723E281A874B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_263285638a0cb0ca9a63ff9af5f6a069_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_263285638a0cb0ca9a63ff9af5f6a069_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_263285638a0cb0ca9a63ff9af5f6a069_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- SHA256 1a67242859aec55bb68b6b76696948f95890718480f2b6820ca83c407d3440e3
- MD5 263285638a0cb0ca9a63ff9af5f6a069
- SHA1 b80c8a3b694602e24346d77e0228948d3ba6e36f
- SHA512 9a60d9080eaf4835a81d31d7ab338aa8b18c0f11f40eb8ee9f2072146ed119cbe9b366d629e6c3805d2fd07dd1880b71afb56594d38fb27e889bfdc97a527487
- SSDEEP 24576:3u6Kp32SXQT7uW0zn5AdlBQYyqSdq6hq+J22icDJ:3imSATSr5AtYdpOi
- TLSH T19EF41232B240D472D67B147246B8CFB149BA7C3E19B1940F67D879B91F723E281A874B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1