General

  • Target
    2025-07-01_c04ca2289312fc3c32e25d6ce0cba3fd_amadey_black-basta_elex_luca-stealer_lynx_smoke-loader_stop
  • Size 4.6MB
  • Sample250701-rnvltaxj16
  • SHA256 fdfaa3e8ef9dbfa85b829c1e8a50f5fb236b4a9c90629462859a5ce9dd54f835
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • redline

C2
  • 185.119.58.241:60134

Attributes
  • auth_value

    82fae2a06c39f03a5b4a1b6816acb8e2

Targets

    • Target
      2025-07-01_c04ca2289312fc3c32e25d6ce0cba3fd_amadey_black-basta_elex_luca-stealer_lynx_smoke-loader_stop
    • Size 4.6MB
    • SHA256 fdfaa3e8ef9dbfa85b829c1e8a50f5fb236b4a9c90629462859a5ce9dd54f835
    • MD5 SHA1 SHA512 SSDEEP
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks