General
- Target 2026-08-08_070e7cf96121bb0ea857c4b52e7d3f7f_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 765KB
- Sample260808-esxkrazfjg
- SHA256 da68d25b19637e79a4d011ab18ed5fd77dfbae11e25c2610ce5e2917b2bf34e6
- MD5 070e7cf96121bb0ea857c4b52e7d3f7f
- SHA1 b0bb6243abcdb8630a25c094f144cdd1a0d67aba
- SHA512 75eff4161e2c40f29f1e8ce7dda16836d43ffbd7f19cde5431e77b8fdd2f06b33c2d316747f6943507a6aa5860a18a10eeb99bd0cde69f65b8cdbdc659a7e87a
- SSDEEP 12288:oA26jQsRKdlgoC2EoTtvkx6qbHD5kTX4ayvKNKMJ9jyGcXgeyYcH54twbv+JfXxN:od6MdvC2NTex66iT4PvKNK4j1cQMcZCl
- TLSH T136F41269B0C0C0B2D567103186F8CEB14ABA7D3D55B0040F27E939BE1FB27D1691DB9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_070e7cf96121bb0ea857c4b52e7d3f7f_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_070e7cf96121bb0ea857c4b52e7d3f7f_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_070e7cf96121bb0ea857c4b52e7d3f7f_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 765KB
- SHA256 da68d25b19637e79a4d011ab18ed5fd77dfbae11e25c2610ce5e2917b2bf34e6
- MD5 070e7cf96121bb0ea857c4b52e7d3f7f
- SHA1 b0bb6243abcdb8630a25c094f144cdd1a0d67aba
- SHA512 75eff4161e2c40f29f1e8ce7dda16836d43ffbd7f19cde5431e77b8fdd2f06b33c2d316747f6943507a6aa5860a18a10eeb99bd0cde69f65b8cdbdc659a7e87a
- SSDEEP 12288:oA26jQsRKdlgoC2EoTtvkx6qbHD5kTX4ayvKNKMJ9jyGcXgeyYcH54twbv+JfXxN:od6MdvC2NTex66iT4PvKNK4j1cQMcZCl
- TLSH T136F41269B0C0C0B2D567103186F8CEB14ABA7D3D55B0040F27E939BE1FB27D1691DB9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1