General
- Target 2026-08-27_550af95ec9e9f6f2d337e9d58d3f9300_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260827-v45cqsxzev
- SHA256 f800fc74a69bd069c8e666028e3f0e91ecb448746c2c663f167e944b9c448e6f
- MD5 550af95ec9e9f6f2d337e9d58d3f9300
- SHA1 d3c15b192cacddf6632982e516704ac7a48e4180
- SHA512 b191e891e401ca1ef6ab316ec98c8bfe90236dd021e82521a455896a0a535609922daddfacacdd94f09cfea92f3bbc2d747a828c9888b2151824009633e7bf80
- SSDEEP 3072:KJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:KghLQ0sQmpcF8BzXfwVfAI
- TLSH T1C5344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-27_550af95ec9e9f6f2d337e9d58d3f9300_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-08-27_550af95ec9e9f6f2d337e9d58d3f9300_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 f800fc74a69bd069c8e666028e3f0e91ecb448746c2c663f167e944b9c448e6f
- MD5 550af95ec9e9f6f2d337e9d58d3f9300
- SHA1 d3c15b192cacddf6632982e516704ac7a48e4180
- SHA512 b191e891e401ca1ef6ab316ec98c8bfe90236dd021e82521a455896a0a535609922daddfacacdd94f09cfea92f3bbc2d747a828c9888b2151824009633e7bf80
- SSDEEP 3072:KJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:KghLQ0sQmpcF8BzXfwVfAI
- TLSH T1C5344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE