General

  • Target
    2026-05-17_b79b7ca44c814f3fd6517e30e0f676d4_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
  • Size 402KB
  • Sample260517-qkmalacv4j
  • SHA256 95bb0d57e871c9e6faa76af703b412be23040b07c122b69cf9928af5b4d4501e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • redline

Botnet
  • furga

C2
  • 83.97.73.128:19071

Attributes
  • auth_value

    1b7af6db7a79a3475798fcf494818be7

Targets

    • Target
      2026-05-17_b79b7ca44c814f3fd6517e30e0f676d4_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
    • Size 402KB
    • SHA256 95bb0d57e871c9e6faa76af703b412be23040b07c122b69cf9928af5b4d4501e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Detects executables packed with ConfuserEx Mod

MITRE ATT&CK Enterprise v16

Tasks