General
- Target 2026-08-28_ed226ab8461ee7e9f6b037077334ab0d_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260828-hbce2afl2t
- SHA256 80d0e00a9aeb541b7199e7f01779b3b68a27cd171f9bc2806527408f4af4405f
- MD5 ed226ab8461ee7e9f6b037077334ab0d
- SHA1 e64dfed5a0f2939970bd35aa26b7e41b73e27b65
- SHA512 36420c724fba30b24ff022e9a978559a3837cdf506c8bb1b424578285a4963a058b8983c9d39aa52595739c1ea8957546ac8dc053f94b7cfe18ebc749c71df68
- SSDEEP 3072:5JWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:5ghLQ0sQmpcF8BzXfwVfAI
- TLSH T137344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-28_ed226ab8461ee7e9f6b037077334ab0d_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-08-28_ed226ab8461ee7e9f6b037077334ab0d_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 80d0e00a9aeb541b7199e7f01779b3b68a27cd171f9bc2806527408f4af4405f
- MD5 ed226ab8461ee7e9f6b037077334ab0d
- SHA1 e64dfed5a0f2939970bd35aa26b7e41b73e27b65
- SHA512 36420c724fba30b24ff022e9a978559a3837cdf506c8bb1b424578285a4963a058b8983c9d39aa52595739c1ea8957546ac8dc053f94b7cfe18ebc749c71df68
- SSDEEP 3072:5JWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:5ghLQ0sQmpcF8BzXfwVfAI
- TLSH T137344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE