redline | 512ac913ac02033f24682c72c5ba10d3d304e9dbfec5ce0f528bd9024851dbcc

General

Target
2026-08-10_e807b615389cd0c7d8d2334b0eb6fd86_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
Size 386KB
Sample260810-qdzbksvsbx
SHA256 512ac913ac02033f24682c72c5ba10d3d304e9dbfec5ce0f528bd9024851dbcc
MD5 e807b615389cd0c7d8d2334b0eb6fd86
SHA1 f84e547a8e30c1a31ecf3e0f71f98bd3f246e74f
SHA512 97814ec9ec09438f6f83d3ac4d6793a4b2338585f5945e90ba3f2faf656a756c99701366b0b9e947269158b8455742ae3e74a91fdda7c8f1f8863e5563045069
SSDEEP 6144:6B8zp4EBySbUkrs+V0wt8IGpaWRfgpMUtkHrCINDxEx+XmcVADTRXA:6mzBySbUkMwthG4MVrf3X8TRXA
TLSH
T167847C1520CCC7B2D791D53328AEA6A854FCDA621FB0719BFD8D72364EE327356120A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

redline

Botnet

genda

C2

77.91.124.55:19071

Targets

- Target
  2026-08-10_e807b615389cd0c7d8d2334b0eb6fd86_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 386KB
- SHA256 512ac913ac02033f24682c72c5ba10d3d304e9dbfec5ce0f528bd9024851dbcc
- MD5 e807b615389cd0c7d8d2334b0eb6fd86
- SHA1 f84e547a8e30c1a31ecf3e0f71f98bd3f246e74f
- SHA512 97814ec9ec09438f6f83d3ac4d6793a4b2338585f5945e90ba3f2faf656a756c99701366b0b9e947269158b8455742ae3e74a91fdda7c8f1f8863e5563045069
- SSDEEP 6144:6B8zp4EBySbUkrs+V0wt8IGpaWRfgpMUtkHrCINDxEx+XmcVADTRXA:6mzBySbUkMwthG4MVrf3X8TRXA
- TLSH
  T167847C1520CCC7B2D791D53328AEA6A854FCDA621FB0719BFD8D72364EE327356120A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

genda discovery redline infostealer
- Family: RedLine
  RedLine Stealer is a malware family written in C#, first appearing in early 2020.
  infostealer redline
- RedLine payload
- Detects executables packed with ConfuserEx Mod
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: RedLine

RedLine payload

Detects executables packed with ConfuserEx Mod

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2