General
- Target 2026-09-29_a5ae8212f0358ca84007bb31a87c5a4e_elex_redline-stealer_rhadamanthys_stop
- Size 1.3MB
- Sample260929-xrn64avane
- SHA256 86d91804fab3655112705955d94ca00a14403d52d14bd6967b72bdb7635c37f3
- MD5 a5ae8212f0358ca84007bb31a87c5a4e
- SHA1 190ecbc24db9fda4f7d29a01d5b5eb16bae9c52b
- SHA512 0d811f46b3c9991c0e954dd3f5bf4b2bf9e4bb9d322252f9b3d1a97363d50ce64391bb9f8fdc7d84946fa0fc140270a5f47ce23a8c75dd5851cad88cef92ed4e
- SSDEEP 12288:S5dGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMW0:S9nQ/tbw/2Mkjy6Fr7g0o0
- TLSH T1615522647940E473D91B04B50846C2A1AB3F4D913BB5DB8BBB891B3F9F383D05A5B389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_a5ae8212f0358ca84007bb31a87c5a4e_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_a5ae8212f0358ca84007bb31a87c5a4e_elex_redline-stealer_rhadamanthys_stop
- Size 1.3MB
- SHA256 86d91804fab3655112705955d94ca00a14403d52d14bd6967b72bdb7635c37f3
- MD5 a5ae8212f0358ca84007bb31a87c5a4e
- SHA1 190ecbc24db9fda4f7d29a01d5b5eb16bae9c52b
- SHA512 0d811f46b3c9991c0e954dd3f5bf4b2bf9e4bb9d322252f9b3d1a97363d50ce64391bb9f8fdc7d84946fa0fc140270a5f47ce23a8c75dd5851cad88cef92ed4e
- SSDEEP 12288:S5dGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMW0:S9nQ/tbw/2Mkjy6Fr7g0o0
- TLSH T1615522647940E473D91B04B50846C2A1AB3F4D913BB5DB8BBB891B3F9F383D05A5B389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1