General
- Target 2026-08-20_2b4d5b6798398da347eab239b7b0d0bb_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260820-wp71rasgpe
- SHA256 a53bb80123d771c9520d1f6712daa627fb00fc4625002c9bc949d0628388fbe5
- MD5 2b4d5b6798398da347eab239b7b0d0bb
- SHA1 d7277c1c122fbc570948463eb5c9ef8445465a6f
- SHA512 e1cede75e93a7412e90672391ddbb9012f3dde91f614bfe6c946d841f10a6e07b6389fed789b1cc07764a59b9bfb81735d0eb31e5e215d1086eccb8adf16e093
- SSDEEP 3072:2JWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:2ghLQ0sQmpcF8BzXfwVfAI
- TLSH T1C1344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_2b4d5b6798398da347eab239b7b0d0bb_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-08-20_2b4d5b6798398da347eab239b7b0d0bb_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 a53bb80123d771c9520d1f6712daa627fb00fc4625002c9bc949d0628388fbe5
- MD5 2b4d5b6798398da347eab239b7b0d0bb
- SHA1 d7277c1c122fbc570948463eb5c9ef8445465a6f
- SHA512 e1cede75e93a7412e90672391ddbb9012f3dde91f614bfe6c946d841f10a6e07b6389fed789b1cc07764a59b9bfb81735d0eb31e5e215d1086eccb8adf16e093
- SSDEEP 3072:2JWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:2ghLQ0sQmpcF8BzXfwVfAI
- TLSH T1C1344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE