General
- Target 2026-09-09_0faf2da86c2eebbe29686303c7c05b87_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260910-akf6ksseqe
- SHA256 bc43a0dfda41db3af6d39de7d10152fb88dc4735ec847be70edaa54b03f365a2
- MD5 0faf2da86c2eebbe29686303c7c05b87
- SHA1 1a242a53c3c10783737e8d30424521e8deaf8224
- SHA512 fd997873834e5cc947ff1f4ffd59176f93eeb6ac950685803f79bc75b980712ad4ad2b37e00075ee020d80998b39312eef854c437a12c75f5b820c2efa2ec1a8
- SSDEEP 3072:mJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:mghLQ0sQmpcF8BzXfwVfAI
- TLSH T180344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-09_0faf2da86c2eebbe29686303c7c05b87_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-09-09_0faf2da86c2eebbe29686303c7c05b87_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 bc43a0dfda41db3af6d39de7d10152fb88dc4735ec847be70edaa54b03f365a2
- MD5 0faf2da86c2eebbe29686303c7c05b87
- SHA1 1a242a53c3c10783737e8d30424521e8deaf8224
- SHA512 fd997873834e5cc947ff1f4ffd59176f93eeb6ac950685803f79bc75b980712ad4ad2b37e00075ee020d80998b39312eef854c437a12c75f5b820c2efa2ec1a8
- SSDEEP 3072:mJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:mghLQ0sQmpcF8BzXfwVfAI
- TLSH T180344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE