General
- Target 2026-09-04_6c41c798c6415123da551515356231ef_elex_redline-stealer_rhadamanthys_stealc_stop
- Size 663KB
- Sample260905-jqd3vazdmf
- SHA256 659396ed603c8a52da7e3500459e0637b2b224ef60bc7e94065234f5042fd633
- MD5 6c41c798c6415123da551515356231ef
- SHA1 c46293107b2a96f5ffae51c26123c2d0a3e7db8c
- SHA512 79694db563c13303aef08560cca1ce6b7b624b5db7770739ccc13140b50eba14179faf1a4de28cc48f28e88b74ae64d949f4794ed8fc9bc5d550912d931f27f9
- SSDEEP 12288:LYmIjEXdOiFhHW2eXpn+6xc2W46d3ZtiPD0EbI5072l2dMwr/f1Oaho76vn1f:JXochHgXt+4C38d050pMQHCW1f
- TLSH T163E4237173B2D932E89679394B1CC7B5D929AA32C845BC1BF3DD62272D70380CAD2217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_6c41c798c6415123da551515356231ef_elex_redline-stealer_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_6c41c798c6415123da551515356231ef_elex_redline-stealer_rhadamanthys_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_6c41c798c6415123da551515356231ef_elex_redline-stealer_rhadamanthys_stealc_stop
- Size 663KB
- SHA256 659396ed603c8a52da7e3500459e0637b2b224ef60bc7e94065234f5042fd633
- MD5 6c41c798c6415123da551515356231ef
- SHA1 c46293107b2a96f5ffae51c26123c2d0a3e7db8c
- SHA512 79694db563c13303aef08560cca1ce6b7b624b5db7770739ccc13140b50eba14179faf1a4de28cc48f28e88b74ae64d949f4794ed8fc9bc5d550912d931f27f9
- SSDEEP 12288:LYmIjEXdOiFhHW2eXpn+6xc2W46d3ZtiPD0EbI5072l2dMwr/f1Oaho76vn1f:JXochHgXt+4C38d050pMQHCW1f
- TLSH T163E4237173B2D932E89679394B1CC7B5D929AA32C845BC1BF3DD62272D70380CAD2217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1