General
- Target 2026-08-18_ae1259e99b2d36c81fe19c9923f00e11_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260818-r2laasvzax
- SHA256 56a381b4b92a1f4f862830cb72a77d5878f84e9ccd979c93f243312b20932471
- MD5 ae1259e99b2d36c81fe19c9923f00e11
- SHA1 3ec8703ed55a6c2c7f8d12976ca249a0c0e85e86
- SHA512 c7a0b37b73227817193cabaddf437ed27f7a68e71bffc0c0a8addb711dae96887ea618b58f01fd9e3fdae4ebb7518208b903fb1e1d38b4bc6092c66e91cc4efd
- SSDEEP 3072:+JWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:+ghLQ0sQmpcF8BzXfwVfAI
- TLSH T1A8344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-18_ae1259e99b2d36c81fe19c9923f00e11_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-08-18_ae1259e99b2d36c81fe19c9923f00e11_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 56a381b4b92a1f4f862830cb72a77d5878f84e9ccd979c93f243312b20932471
- MD5 ae1259e99b2d36c81fe19c9923f00e11
- SHA1 3ec8703ed55a6c2c7f8d12976ca249a0c0e85e86
- SHA512 c7a0b37b73227817193cabaddf437ed27f7a68e71bffc0c0a8addb711dae96887ea618b58f01fd9e3fdae4ebb7518208b903fb1e1d38b4bc6092c66e91cc4efd
- SSDEEP 3072:+JWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:+ghLQ0sQmpcF8BzXfwVfAI
- TLSH T1A8344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE