General
- Target 2026-10-22_0471e920a6fe3f2c342a69b8e18f8c95_elex_redline-stealer_rhadamanthys_stop
- Size 1.3MB
- Sample261024-2w14nsfh83
- SHA256 733caeea3267059e0733bc9cc7cf1e2d23dbb3171b24fc9f51f77a85de8761a0
- MD5 0471e920a6fe3f2c342a69b8e18f8c95
- SHA1 0e141ea3074155a0a9c1570c96b78f076dc37ada
- SHA512 66a390563f382e3ce50d7a1521e77253e7b0f31b635e1c0d4611b2adf8ed075d29df94596d7770526aa4c5d751149831303f7b4e70f2333cc848561b0c6ab438
- SSDEEP 12288:E6pYln0//fvF/D+rsUXm+jyDFm4BgcG/DoMb+s9n5NSBm2yw2:Vye/fvF7asVSyRmdcG/DH+M54c2yw
- TLSH T1AD55239A7AE1C173C97652713834C7F1139BACB12A70B483F5853FAB9FB0AE5561120E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_0471e920a6fe3f2c342a69b8e18f8c95_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_0471e920a6fe3f2c342a69b8e18f8c95_elex_redline-stealer_rhadamanthys_stop
- Size 1.3MB
- SHA256 733caeea3267059e0733bc9cc7cf1e2d23dbb3171b24fc9f51f77a85de8761a0
- MD5 0471e920a6fe3f2c342a69b8e18f8c95
- SHA1 0e141ea3074155a0a9c1570c96b78f076dc37ada
- SHA512 66a390563f382e3ce50d7a1521e77253e7b0f31b635e1c0d4611b2adf8ed075d29df94596d7770526aa4c5d751149831303f7b4e70f2333cc848561b0c6ab438
- SSDEEP 12288:E6pYln0//fvF/D+rsUXm+jyDFm4BgcG/DoMb+s9n5NSBm2yw2:Vye/fvF7asVSyRmdcG/DH+M54c2yw
- TLSH T1AD55239A7AE1C173C97652713834C7F1139BACB12A70B483F5853FAB9FB0AE5561120E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1