General
- Target 2026-10-01_31abd5d26c6fd9b58ea7122753afef61_elex_redline-stealer_rhadamanthys_stop
- Size 248KB
- Sample261002-vp8fvasv4p
- SHA256 20cba521a69e47b6a8384e474c8ee13579ce469a18f20b204d943c1f3deb7984
- MD5 31abd5d26c6fd9b58ea7122753afef61
- SHA1 0fde5e38f313fb56a5761858938607d50ea05b5d
- SHA512 8754408a93fa597735f54f5df30efa72a9f896e32ee9a98d7d67c471a6c9dbd18824da48ef29b81fa93a2c9b28b482bdf135f662d75a4d6b2dd2fb6b31ed3de9
- SSDEEP 3072:vJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9Nj5:vghLQ0sQmpcF8BzXfwVfAIPj5
- TLSH T156446B11B2809031E3664B740856EBA1467EBD354BA2D6CFF7A83F795A312D3693720F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-01_31abd5d26c6fd9b58ea7122753afef61_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-10-01_31abd5d26c6fd9b58ea7122753afef61_elex_redline-stealer_rhadamanthys_stop
- Size 248KB
- SHA256 20cba521a69e47b6a8384e474c8ee13579ce469a18f20b204d943c1f3deb7984
- MD5 31abd5d26c6fd9b58ea7122753afef61
- SHA1 0fde5e38f313fb56a5761858938607d50ea05b5d
- SHA512 8754408a93fa597735f54f5df30efa72a9f896e32ee9a98d7d67c471a6c9dbd18824da48ef29b81fa93a2c9b28b482bdf135f662d75a4d6b2dd2fb6b31ed3de9
- SSDEEP 3072:vJWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9Nj5:vghLQ0sQmpcF8BzXfwVfAIPj5
- TLSH T156446B11B2809031E3664B740856EBA1467EBD354BA2D6CFF7A83F795A312D3693720F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE