General
- Target 2026-08-13_dc9fd676b8e41e06b9a9bb9b2823ec48_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260813-wdk2vadj7t
- SHA256 c986989aaa71e681933253a3f99d3b4169ba9286e36a6c41490f03d4c43bc29d
- MD5 dc9fd676b8e41e06b9a9bb9b2823ec48
- SHA1 5a32e21f81e4fd0835b77f319d35c7da505926b9
- SHA512 5a6af3e9f85bab015f1e55ff1e8add0348e90df298ddbab0b0e4a4e21af06cc3dc0bbb941c149f3373e78a3f4a6aa798bae5fa167b9dcb44bd989a3bf813d82b
- SSDEEP 3072:3JWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:3ghLQ0sQmpcF8BzXfwVfAI
- TLSH T181344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-13_dc9fd676b8e41e06b9a9bb9b2823ec48_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-08-13_dc9fd676b8e41e06b9a9bb9b2823ec48_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 c986989aaa71e681933253a3f99d3b4169ba9286e36a6c41490f03d4c43bc29d
- MD5 dc9fd676b8e41e06b9a9bb9b2823ec48
- SHA1 5a32e21f81e4fd0835b77f319d35c7da505926b9
- SHA512 5a6af3e9f85bab015f1e55ff1e8add0348e90df298ddbab0b0e4a4e21af06cc3dc0bbb941c149f3373e78a3f4a6aa798bae5fa167b9dcb44bd989a3bf813d82b
- SSDEEP 3072:3JWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:3ghLQ0sQmpcF8BzXfwVfAI
- TLSH T181344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE