General
- Target 2026-08-28_5f2b2c6bcd671fa04856885c69c17ce4_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- Sample260828-s97nyade93
- SHA256 0d9c8a193f73630c066f1535fd9e5fb61c0c45f8552b648cc63cc446ab4c4ce8
- MD5 5f2b2c6bcd671fa04856885c69c17ce4
- SHA1 4621f87dd3d3913f4168885f6e5559f94083a371
- SHA512 213412d05a304b7606d6b132911a4c28360b20d06ea150dd36d40cd4160645747a07bb2ea417d740ab3ec8121e499bb44c4835d23e58d07b316b4e6ca09075de
- SSDEEP 24576:Sd6ppyCchTeqqUagtrRzK7R04mGi/gxiMcXC/GyF7:S+cCeT1BagtpyR044g4XC/GyF7
- TLSH T196F41270B2C4C0B2D5B3207586B9CE6149BA7D3A5524981F2BED3AB50F333D1825E79B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_5f2b2c6bcd671fa04856885c69c17ce4_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_5f2b2c6bcd671fa04856885c69c17ce4_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_5f2b2c6bcd671fa04856885c69c17ce4_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- SHA256 0d9c8a193f73630c066f1535fd9e5fb61c0c45f8552b648cc63cc446ab4c4ce8
- MD5 5f2b2c6bcd671fa04856885c69c17ce4
- SHA1 4621f87dd3d3913f4168885f6e5559f94083a371
- SHA512 213412d05a304b7606d6b132911a4c28360b20d06ea150dd36d40cd4160645747a07bb2ea417d740ab3ec8121e499bb44c4835d23e58d07b316b4e6ca09075de
- SSDEEP 24576:Sd6ppyCchTeqqUagtrRzK7R04mGi/gxiMcXC/GyF7:S+cCeT1BagtpyR044g4XC/GyF7
- TLSH T196F41270B2C4C0B2D5B3207586B9CE6149BA7D3A5524981F2BED3AB50F333D1825E79B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1