Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/11/2026, 15:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-11_235a8ccdee75165c23d42e89b63164e2_elex_redline-stealer_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-11_235a8ccdee75165c23d42e89b63164e2_elex_redline-stealer_rhadamanthys_stealc_stop.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-11-11_235a8ccdee75165c23d42e89b63164e2_elex_redline-stealer_rhadamanthys_stealc_stop.exe
- Size 1.2MB
- Sample261113-taaetsds6z
- SHA256 aecd09a041d3e63ef8bb34cf12088206002a96ac43ef5cd8b09c24f02595c33d
- MD5 235a8ccdee75165c23d42e89b63164e2
- SHA1 8ef60f31b958a22ed246067cff936efcb94d5a59
- SHA512 0ae6e5440b5b0d7d81e8e01018adfd335a6f06dae03461341c0c6cc25aaaa10e6074fb151827542ecb8e1f0daf630c0614e9ce4f20b10ffeac02bea9107f4781
- SSDEEP 12288:8Xc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:8sqjnhMgeiCl7G0nehbGZpbD
- TLSH T1B855233AB5488073C82204B582A5E659BC1F7E53AA6444837FAB25FEEFB11D44B3D137
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-11_235a8ccdee75165c23d42e89b63164e2_elex_redline-stealer_rhadamanthys_stealc_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-11-11_235a8ccdee75165c23d42e89b63164e2_elex_redline-stealer_rhadamanthys_stealc_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-11_235a8ccdee75165c23d42e89b63164e2_elex_redline-stealer_rhadamanthys_stealc_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3336