General
- Target 2026-10-10_b7a667400bba0c8eee0e2e26ccdefd82_elex_redline-stealer_rhadamanthys_stop
- Size 2.3MB
- Sample261011-e4bgnaxz7m
- SHA256 81f2d3531e81442ffa5ea7f082e46df76c165305ef3fbb877091ea1c25be617f
- MD5 b7a667400bba0c8eee0e2e26ccdefd82
- SHA1 25056579bb1772c0f8e93060f1c632392c8a9af6
- SHA512 e1312d2065c7d57957c4a0249714d547a3834333db3f8ceb0c7666819c12dc0d2f55373e19d328f9a8be14f0b08c9b69e34ada02728751cf6652824c0e18dda6
- SSDEEP 24576:f3dCN/j2GLl3iFSE33b9xLaKngL2jdshRTdG1YxITqvfPkbIcbjL:fkN/j2U4FHdarSj8RoTCC
- TLSH T157B52375FAC0D630D01B57781AADDE942D12BFF8E11B884ADAD11BFF5A797E0923A000
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-10_b7a667400bba0c8eee0e2e26ccdefd82_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_b7a667400bba0c8eee0e2e26ccdefd82_elex_redline-stealer_rhadamanthys_stop
- Size 2.3MB
- SHA256 81f2d3531e81442ffa5ea7f082e46df76c165305ef3fbb877091ea1c25be617f
- MD5 b7a667400bba0c8eee0e2e26ccdefd82
- SHA1 25056579bb1772c0f8e93060f1c632392c8a9af6
- SHA512 e1312d2065c7d57957c4a0249714d547a3834333db3f8ceb0c7666819c12dc0d2f55373e19d328f9a8be14f0b08c9b69e34ada02728751cf6652824c0e18dda6
- SSDEEP 24576:f3dCN/j2GLl3iFSE33b9xLaKngL2jdshRTdG1YxITqvfPkbIcbjL:fkN/j2U4FHdarSj8RoTCC
- TLSH T157B52375FAC0D630D01B57781AADDE942D12BFF8E11B884ADAD11BFF5A797E0923A000
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1