General

  • Target

    2025-04-07_f2f15ebacc353c878213af99699b34dc_amadey_rhadamanthys_smoke-loader

  • Size

    691KB

  • Sample

    250407-ec649axyay

  • MD5

    f2f15ebacc353c878213af99699b34dc

  • SHA1

    716a391fd178103c1745c6513b79130db386e77f

  • SHA256

    2f48dce96a3a36a28a789c89629fc818702a5ba0f3f29e3380a6ff81ddb9d96a

  • SHA512

    51632819df0db968445475defdd17e0d5b2226ea7c102edaf17ced6c4f19fd3eaeb748e732a16876cd9ca0500bcadf7d2214be9ece4a903b1f8e2ad78138e9e8

  • SSDEEP

    12288:sw3zk2EJiICSVtg0wBW3iFt4ONq30/4St2NBd0JoLdaoi9Bbk:swDkNJBbVTb34k30/8dRi9

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Targets

    • Target

      2025-04-07_f2f15ebacc353c878213af99699b34dc_amadey_rhadamanthys_smoke-loader

    • Size

      691KB

    • MD5

      f2f15ebacc353c878213af99699b34dc

    • SHA1

      716a391fd178103c1745c6513b79130db386e77f

    • SHA256

      2f48dce96a3a36a28a789c89629fc818702a5ba0f3f29e3380a6ff81ddb9d96a

    • SHA512

      51632819df0db968445475defdd17e0d5b2226ea7c102edaf17ced6c4f19fd3eaeb748e732a16876cd9ca0500bcadf7d2214be9ece4a903b1f8e2ad78138e9e8

    • SSDEEP

      12288:sw3zk2EJiICSVtg0wBW3iFt4ONq30/4St2NBd0JoLdaoi9Bbk:swDkNJBbVTb34k30/8dRi9

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks