16ab44f8971ab0410cbde5f24988cb62f7ab256201bee60971c6c320ef22b4f8 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-08-08...op.exe

windows10-2004-x64

7

2026-08-08...op.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_83fbc19906aa03bba071b660d50fd808_elex_redline-stealer_rhadamanthys_stealc_stop
Size 667KB
Sample260808-dr5z3assfy
SHA256 16ab44f8971ab0410cbde5f24988cb62f7ab256201bee60971c6c320ef22b4f8
MD5 83fbc19906aa03bba071b660d50fd808
SHA1 fb4db6b01464182ae3132d62d64baf94915f83c8
SHA512 dd9cea0dd45f1fc2b4fb3b46f4fe7bae34864bfaa88fe76f1185f5df5f2ca99d156396ceb194ec7aaf3f744ad60917086086e690746852960f478e7959d4d11c
SSDEEP 12288:7YmIjEZR7MV20iV4FcK4yWcgM8nqYei0dPgH1v/eGFdOousxAhSX2eSCLC+:ZZFxIFIyGibdPgHB/eYvu5s2aC+
TLSH
T167E42341B2B1D831C4D1083089AA5771D5A6FC7068A2DD4AB7D45F3E0EE1783EA2B79F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-08_83fbc19906aa03bba071b660d50fd808_elex_redline-stealer_rhadamanthys_stealc_stop.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

discovery ransomware spyware stealer

Behavioral task

behavioral2

Sample

2026-08-08_83fbc19906aa03bba071b660d50fd808_elex_redline-stealer_rhadamanthys_stealc_stop.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

discovery ransomware spyware stealer

Malware Config

Targets

- Target
  2026-08-08_83fbc19906aa03bba071b660d50fd808_elex_redline-stealer_rhadamanthys_stealc_stop
- Size 667KB
- SHA256 16ab44f8971ab0410cbde5f24988cb62f7ab256201bee60971c6c320ef22b4f8
- MD5 83fbc19906aa03bba071b660d50fd808
- SHA1 fb4db6b01464182ae3132d62d64baf94915f83c8
- SHA512 dd9cea0dd45f1fc2b4fb3b46f4fe7bae34864bfaa88fe76f1185f5df5f2ca99d156396ceb194ec7aaf3f744ad60917086086e690746852960f478e7959d4d11c
- SSDEEP 12288:7YmIjEZR7MV20iV4FcK4yWcgM8nqYei0dPgH1v/eGFdOousxAhSX2eSCLC+:ZZFxIFIyGibdPgHB/eYvu5s2aC+
- TLSH
  T167E42341B2B1D831C4D1083089AA5771D5A6FC7068A2DD4AB7D45F3E0EE1783EA2B79F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomwarespywarestealer

behavioral2

discoveryransomwarespywarestealer

© 2018-2026

Terms | Privacy