General
- Target 2026-10-22_7d1e108960e6530cb2f145455923391d_elex_redline-stealer_rhadamanthys_stop
- Size 1.3MB
- Sample261024-jalgzsav2p
- SHA256 19f73e3594ec4bdda444844db869d74e5f1989f8026e6d52d060a5e6d8e94f50
- MD5 7d1e108960e6530cb2f145455923391d
- SHA1 edc66a1f9f21fc0e4935e10a142ffd5bbcbfc200
- SHA512 595dd708f910f0ac047f943af9df0c140d1026454ac297cd693098bfb4e608da21df88082005f57e7d45860205d1300f6f215c184ef547c2bd8e625ea764b570
- SSDEEP 12288:85YYln0//fvF/D+rsUXm+jyDFm4BgcG/DoMb+s9n5NSBm2ywL:w9e/fvF7asVSyRmdcG/DH+M54c2yw
- TLSH T1DC5523967AE1C173C97652753438C7F1139BACB12A70B483F9853FAB6FB0AE1561120E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_7d1e108960e6530cb2f145455923391d_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_7d1e108960e6530cb2f145455923391d_elex_redline-stealer_rhadamanthys_stop
- Size 1.3MB
- SHA256 19f73e3594ec4bdda444844db869d74e5f1989f8026e6d52d060a5e6d8e94f50
- MD5 7d1e108960e6530cb2f145455923391d
- SHA1 edc66a1f9f21fc0e4935e10a142ffd5bbcbfc200
- SHA512 595dd708f910f0ac047f943af9df0c140d1026454ac297cd693098bfb4e608da21df88082005f57e7d45860205d1300f6f215c184ef547c2bd8e625ea764b570
- SSDEEP 12288:85YYln0//fvF/D+rsUXm+jyDFm4BgcG/DoMb+s9n5NSBm2ywL:w9e/fvF7asVSyRmdcG/DH+M54c2yw
- TLSH T1DC5523967AE1C173C97652753438C7F1139BACB12A70B483F9853FAB6FB0AE1561120E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1