General
- Target 2026-07-30_64c861304ec483cf1f230c4aac1bb870_amadey_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 286KB
- Sample260730-2d6ansgl9x
- SHA256 af42d5aa212f4d7be3dfe01013e846b0fd16b962a1ab871d178466258651b900
- MD5 64c861304ec483cf1f230c4aac1bb870
- SHA1 67d0d5f4f3e072082d4e5133835e08c2f8f87939
- SHA512 28c0491151aa9de464f3b05cdd36c27134065df751bc6b20becb3c7358cf49535bda4a0aa3afcc2173fb76df6e482beca806500afdb48ad2f42e4123d0019e57
- SSDEEP 3072:+mfuSgQPWJfUVf0PJjhezPWKyhy8VJLc4HJsIGJPuewjGFT30CkyP/7:mSgQPWi0PJYzuNxOIGJm+130Ckg/7
- TLSH T1F3549DD1A24380B3ED420D79BDD96EB4DA742CB01BB16FC71BCABA4906732D57B31609
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_64c861304ec483cf1f230c4aac1bb870_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_64c861304ec483cf1f230c4aac1bb870_amadey_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_64c861304ec483cf1f230c4aac1bb870_amadey_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 286KB
- SHA256 af42d5aa212f4d7be3dfe01013e846b0fd16b962a1ab871d178466258651b900
- MD5 64c861304ec483cf1f230c4aac1bb870
- SHA1 67d0d5f4f3e072082d4e5133835e08c2f8f87939
- SHA512 28c0491151aa9de464f3b05cdd36c27134065df751bc6b20becb3c7358cf49535bda4a0aa3afcc2173fb76df6e482beca806500afdb48ad2f42e4123d0019e57
- SSDEEP 3072:+mfuSgQPWJfUVf0PJjhezPWKyhy8VJLc4HJsIGJPuewjGFT30CkyP/7:mSgQPWi0PJYzuNxOIGJm+130Ckg/7
- TLSH T1F3549DD1A24380B3ED420D79BDD96EB4DA742CB01BB16FC71BCABA4906732D57B31609
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Detects executables packed with ConfuserEx Mod