Extracted

• • Target
    2026-08-10_486635d85de1e81f689b5390849b0a91_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
  • Size 445KB
  • SHA256 ff683904c8cdeed2daf1edd749d87a83e61cfc02a638ea468962472fccdc4832
  • MD5 486635d85de1e81f689b5390849b0a91
  • SHA1 53540eefb25f420ee20fece76b1214e42628ac6e
  • SHA512 89574dd6382209d6bce98c2829aab17365f80054fcfaeb0e58c709b1b3c4298ce6276e1e38538c4bf059da93cd323a4ae12b51c8709e44a77c0f199e8d894dc7
  • SSDEEP 6144:3xae9tjEXtoxZhRs4yrRa8AONsMelSxA3+k9++gHPsgjYyc4n5:FvjEXtMAzne++gHkgMyc+
  • TLSH
    T12FA46C21EEF3897DC1528D3248EE51E45A6CFE4A19465C7F03A90EEB872E21F6D10E71
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  taigadiscoveryredlineinfostealer

  • Family: RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Detects executables packed with ConfuserEx Mod

  • Suspicious use of SetThreadContext

  behavioral1behavioral2