General
- Target 2026-10-22_2be1783cfc1202c021e564f91d3a5727_elex_redline-stealer_rhadamanthys_stop
- Size 1.3MB
- Sample261024-wp4nbswsht
- SHA256 31c6e4e6b8fcbde0391a121e0a5d12d6490f217d53d31d781a1f79aae33ba272
- MD5 2be1783cfc1202c021e564f91d3a5727
- SHA1 b11c74a3d75cdadc2f45613dbd4c4a92e74e9df0
- SHA512 5907589267cb10fddd768d851d56eb3b77fc291d64fb46b13664bb299a2c621d55c53f6db053c4c56b665d22a9b54b9955090dbc6f98cc83be0f1e726f957c26
- SSDEEP 12288:t5YYln0//fvF/D+rsUXm+jyDFm4BgcG/DoMb+s9n5NSBm2ywf:D9e/fvF7asVSyRmdcG/DH+M54c2yw
- TLSH T1CC55239A7AE1C073C57652753438C7F1139BACB12A70B483F9853FAB6FB0AE1561120E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_2be1783cfc1202c021e564f91d3a5727_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_2be1783cfc1202c021e564f91d3a5727_elex_redline-stealer_rhadamanthys_stop
- Size 1.3MB
- SHA256 31c6e4e6b8fcbde0391a121e0a5d12d6490f217d53d31d781a1f79aae33ba272
- MD5 2be1783cfc1202c021e564f91d3a5727
- SHA1 b11c74a3d75cdadc2f45613dbd4c4a92e74e9df0
- SHA512 5907589267cb10fddd768d851d56eb3b77fc291d64fb46b13664bb299a2c621d55c53f6db053c4c56b665d22a9b54b9955090dbc6f98cc83be0f1e726f957c26
- SSDEEP 12288:t5YYln0//fvF/D+rsUXm+jyDFm4BgcG/DoMb+s9n5NSBm2ywf:D9e/fvF7asVSyRmdcG/DH+M54c2yw
- TLSH T1CC55239A7AE1C073C57652753438C7F1139BACB12A70B483F9853FAB6FB0AE1561120E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1