General
- Target 2026-10-10_bea61ae90236ca9b987603983907fa6f_elex_redline-stealer_rhadamanthys_stop
- Size 2.3MB
- Sample261011-d7fecavwft
- SHA256 fd86b3be7f09f95549c55457b76f619a60bc424d8b9a9ecbde9983de4e31d94c
- MD5 bea61ae90236ca9b987603983907fa6f
- SHA1 d5d8535723742bf47ecc4112953dead440b26ea5
- SHA512 8fcf8a87b6875cc32b88557c0154f6886537d2062af49b9e59c5137abfe077ada11f34a9552cc44972bea8f10058555c5e52cde5833920fe4ffe5b77c5408891
- SSDEEP 24576:f3dCN/j2GLl3iFSE33b9Uw2aKngL2jdshRTdG1YxITqvfPkbIcbjL:fkN/j2U4FHCarSj8RoTCC
- TLSH T1D9B52375FAC0D630D01B57791BADDE942912BFF8E51B884ADAD11BFF5A397E0923A000
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-10_bea61ae90236ca9b987603983907fa6f_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_bea61ae90236ca9b987603983907fa6f_elex_redline-stealer_rhadamanthys_stop
- Size 2.3MB
- SHA256 fd86b3be7f09f95549c55457b76f619a60bc424d8b9a9ecbde9983de4e31d94c
- MD5 bea61ae90236ca9b987603983907fa6f
- SHA1 d5d8535723742bf47ecc4112953dead440b26ea5
- SHA512 8fcf8a87b6875cc32b88557c0154f6886537d2062af49b9e59c5137abfe077ada11f34a9552cc44972bea8f10058555c5e52cde5833920fe4ffe5b77c5408891
- SSDEEP 24576:f3dCN/j2GLl3iFSE33b9Uw2aKngL2jdshRTdG1YxITqvfPkbIcbjL:fkN/j2U4FHCarSj8RoTCC
- TLSH T1D9B52375FAC0D630D01B57791BADDE942912BFF8E51B884ADAD11BFF5A397E0923A000
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1