General
- Target 2026-08-04_fed4bca22f70b63feb4d0a063f740176_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 337KB
- Sample260805-aahxesfr9s
- SHA256 2d2cf00f1e1b4f6f96aa63035d46c801667ed01f2dec265a33100dd81472cbb3
- MD5 fed4bca22f70b63feb4d0a063f740176
- SHA1 bfe2ea0e2db5e269aab762eecab75ed8f9e3873c
- SHA512 e04d4a1003b47e564bac3f694c49aa2559548f438dabaeef7050aba6addb6614b50183baa5f73ef81ea086881823a72a9b81ad44622e6e858a17587762551d55
- SSDEEP 6144:ZYUmpnbUG4BDB3j8CjN6RZOJs+9TbmRE8z2kajEXgoua44og3:7SnQBDF8CjGb+0Rzzp5Rv4C
- TLSH T1E974F120BAD1D0B1C5AB44350522FAA07A7FB87269F6919B771407FF1E307C19ABB706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_fed4bca22f70b63feb4d0a063f740176_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_fed4bca22f70b63feb4d0a063f740176_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_fed4bca22f70b63feb4d0a063f740176_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- Size 337KB
- SHA256 2d2cf00f1e1b4f6f96aa63035d46c801667ed01f2dec265a33100dd81472cbb3
- MD5 fed4bca22f70b63feb4d0a063f740176
- SHA1 bfe2ea0e2db5e269aab762eecab75ed8f9e3873c
- SHA512 e04d4a1003b47e564bac3f694c49aa2559548f438dabaeef7050aba6addb6614b50183baa5f73ef81ea086881823a72a9b81ad44622e6e858a17587762551d55
- SSDEEP 6144:ZYUmpnbUG4BDB3j8CjN6RZOJs+9TbmRE8z2kajEXgoua44og3:7SnQBDF8CjGb+0Rzzp5Rv4C
- TLSH T1E974F120BAD1D0B1C5AB44350522FAA07A7FB87269F6919B771407FF1E307C19ABB706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Detects executables packed with ConfuserEx Mod
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.