General
- Target 2026-10-10_7068ebbefe9348bfb36a6224831a233a_elex_redline-stealer_rhadamanthys_stop
- Size 1.2MB
- Sample261011-nnbbdstt8m
- SHA256 d1123986a2cc28519ffd77244fb7c1eef8ea12d671b37e755bb893b9ca6b6a64
- MD5 7068ebbefe9348bfb36a6224831a233a
- SHA1 9e71f5b7906b7edced7b0febeeef7d32fa282b72
- SHA512 53419dee1d6f0b5a8562fc0ea6b8c54db944b892e0c1d7c3e05e00981dcaba9be4881d4b32ae7af1fa73ebf20563e7358aa6872b18b0c5454a14ec3dbd65fa50
- SSDEEP 12288:l5kGxAAHBZ5c66U1HpDjENSk05M63wv06X/TQ9WzYwWD:LA8TO5U1JDOSk05bgv06X/09GYwQ
- TLSH T13E5523247DC2D032C080287AE1AEC2B1667ADC711BB59A53FFE76A7B4F353D1651E205
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-10_7068ebbefe9348bfb36a6224831a233a_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_7068ebbefe9348bfb36a6224831a233a_elex_redline-stealer_rhadamanthys_stop
- Size 1.2MB
- SHA256 d1123986a2cc28519ffd77244fb7c1eef8ea12d671b37e755bb893b9ca6b6a64
- MD5 7068ebbefe9348bfb36a6224831a233a
- SHA1 9e71f5b7906b7edced7b0febeeef7d32fa282b72
- SHA512 53419dee1d6f0b5a8562fc0ea6b8c54db944b892e0c1d7c3e05e00981dcaba9be4881d4b32ae7af1fa73ebf20563e7358aa6872b18b0c5454a14ec3dbd65fa50
- SSDEEP 12288:l5kGxAAHBZ5c66U1HpDjENSk05M63wv06X/TQ9WzYwWD:LA8TO5U1JDOSk05bgv06X/09GYwQ
- TLSH T13E5523247DC2D032C080287AE1AEC2B1667ADC711BB59A53FFE76A7B4F353D1651E205
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1