General
- Target 2025-07-01_c04ca2289312fc3c32e25d6ce0cba3fd_amadey_black-basta_elex_luca-stealer_lynx_smoke-loader_stop
- Size 4.6MB
- Sample250701-rnvltaxj16
- SHA256 fdfaa3e8ef9dbfa85b829c1e8a50f5fb236b4a9c90629462859a5ce9dd54f835
- MD5 c04ca2289312fc3c32e25d6ce0cba3fd
- SHA1 2b44d34d514be840b2ba36334ea7661f5830d3ec
- SHA512 6aa6148bf2a13a80a8be60cc739d3797889365e3e8fe35b8e0f12c889e6dadfb36f96973f95cac35e1fda0729fa20a2b7ce3172b4a20b204aab9d1a5648a0a48
- SSDEEP 98304:wLvY+KV50eazKMCtWd4Pjadfvfj/s3OFPrbQOnb:qfeMCq4LadXYWAOn
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2025-07-01_c04ca2289312fc3c32e25d6ce0cba3fd_amadey_black-basta_elex_luca-stealer_lynx_smoke-loader_stop.exe
Resource
win10v2004-20250619-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-07-01_c04ca2289312fc3c32e25d6ce0cba3fd_amadey_black-basta_elex_luca-stealer_lynx_smoke-loader_stop.exe
Resource
win11-20250610-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
C2
-
185.119.58.241:60134
Attributes
-
auth_value
82fae2a06c39f03a5b4a1b6816acb8e2
Targets
-
- Target 2025-07-01_c04ca2289312fc3c32e25d6ce0cba3fd_amadey_black-basta_elex_luca-stealer_lynx_smoke-loader_stop
- Size 4.6MB
- SHA256 fdfaa3e8ef9dbfa85b829c1e8a50f5fb236b4a9c90629462859a5ce9dd54f835
- MD5 c04ca2289312fc3c32e25d6ce0cba3fd
- SHA1 2b44d34d514be840b2ba36334ea7661f5830d3ec
- SHA512 6aa6148bf2a13a80a8be60cc739d3797889365e3e8fe35b8e0f12c889e6dadfb36f96973f95cac35e1fda0729fa20a2b7ce3172b4a20b204aab9d1a5648a0a48
- SSDEEP 98304:wLvY+KV50eazKMCtWd4Pjadfvfj/s3OFPrbQOnb:qfeMCq4LadXYWAOn
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Redline family
Suspicious use of SetThreadContext