General

  • Target

    2025-04-06_46b9d887b4702263cdbddfea57eeca8e_amadey_rhadamanthys_smoke-loader

  • Size

    282KB

  • Sample

    250406-jjg6xstwdt

  • MD5

    46b9d887b4702263cdbddfea57eeca8e

  • SHA1

    28fbe23677c1a9bf3f76ce5b74450795f2b6972a

  • SHA256

    f70d2be11332753f0cf5c52822b248f70debdcb49da5295011b6de33f4fa2d47

  • SHA512

    2edfd8648c123da57f664e1e2a91523502f0cc899397cbb719609de48f96ef92bd96df9df682fa4228db3af45497df419695c187dd6e7ed3f1deb96fe6f42be6

  • SSDEEP

    3072:E/KHdcqCW0fvkZJi4v02Uo5jduu8goVsP1S3rVeXQRjihbuZqWzQ/CDF9n+rVyz+:eK9GW0SwEdNU283PghbmqSHDvGVyph

Malware Config

Extracted

Family

redline

Botnet

@Chicago

C2

185.81.68.115:2920

Attributes
  • auth_value

    624a75e46c4217bc2cafb7758d1978d9

Targets

    • Target

      2025-04-06_46b9d887b4702263cdbddfea57eeca8e_amadey_rhadamanthys_smoke-loader

    • Size

      282KB

    • MD5

      46b9d887b4702263cdbddfea57eeca8e

    • SHA1

      28fbe23677c1a9bf3f76ce5b74450795f2b6972a

    • SHA256

      f70d2be11332753f0cf5c52822b248f70debdcb49da5295011b6de33f4fa2d47

    • SHA512

      2edfd8648c123da57f664e1e2a91523502f0cc899397cbb719609de48f96ef92bd96df9df682fa4228db3af45497df419695c187dd6e7ed3f1deb96fe6f42be6

    • SSDEEP

      3072:E/KHdcqCW0fvkZJi4v02Uo5jduu8goVsP1S3rVeXQRjihbuZqWzQ/CDF9n+rVyz+:eK9GW0SwEdNU283PghbmqSHDvGVyph

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks