General
- Target 2026-08-23_613a05a9512c74a2c5917291d40e76dd_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260824-mmfdaa11a1
- SHA256 76f32206345d4990bcb87c61bdc791c79f9fc783aa16ef8fd816a27db02813b3
- MD5 613a05a9512c74a2c5917291d40e76dd
- SHA1 c23e258f193dcb7bebb6bdd7e4b45be9cf25f33e
- SHA512 a78d8da7dc77c27096b457bda68eb14ef4cac1a2a49d5e3d6f486fcb99ea71a751c2e7477e6c3c045ac0793eb0022f04b8838791b56214a23bf448c8205d9813
- SSDEEP 3072:gJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkQI9:gghLQ0sQmpcF8BzXfwVfQI
- TLSH T192344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-23_613a05a9512c74a2c5917291d40e76dd_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-08-23_613a05a9512c74a2c5917291d40e76dd_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 76f32206345d4990bcb87c61bdc791c79f9fc783aa16ef8fd816a27db02813b3
- MD5 613a05a9512c74a2c5917291d40e76dd
- SHA1 c23e258f193dcb7bebb6bdd7e4b45be9cf25f33e
- SHA512 a78d8da7dc77c27096b457bda68eb14ef4cac1a2a49d5e3d6f486fcb99ea71a751c2e7477e6c3c045ac0793eb0022f04b8838791b56214a23bf448c8205d9813
- SSDEEP 3072:gJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkQI9:gghLQ0sQmpcF8BzXfwVfQI
- TLSH T192344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE