General
- Target 2026-08-27_2128b37356faabef767d74abe069e3ed_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260827-1btnesbb29
- SHA256 396cfff051ab53efa4789d885933e4a3ddbaa0a6ea7a9d5a03ece137261ffbe7
- MD5 2128b37356faabef767d74abe069e3ed
- SHA1 5c5b3966da5d577413ef9072c54558502d3bac7e
- SHA512 9fced49195f61830032c287ccf6b730b753ede8cad317b879021b08b83cab807a2926db357ad5a647917aaa2eba2440f426b85ddf74ecdd09327473c41aa7e55
- SSDEEP 3072:FgJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9B:qghLQ0sQmpcF8BzXfwVfAI
- TLSH T105344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-27_2128b37356faabef767d74abe069e3ed_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-08-27_2128b37356faabef767d74abe069e3ed_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 396cfff051ab53efa4789d885933e4a3ddbaa0a6ea7a9d5a03ece137261ffbe7
- MD5 2128b37356faabef767d74abe069e3ed
- SHA1 5c5b3966da5d577413ef9072c54558502d3bac7e
- SHA512 9fced49195f61830032c287ccf6b730b753ede8cad317b879021b08b83cab807a2926db357ad5a647917aaa2eba2440f426b85ddf74ecdd09327473c41aa7e55
- SSDEEP 3072:FgJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9B:qghLQ0sQmpcF8BzXfwVfAI
- TLSH T105344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE