Extracted

• • Target
    2026-08-10_d49410a221f72bbf8ef4b0d851fc0c53_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
  • Size 386KB
  • SHA256 8c7bcb5881647aba2bc44e5d7b125d9633077abda5742d76f2a11cf52e006c48
  • MD5 d49410a221f72bbf8ef4b0d851fc0c53
  • SHA1 149188e8e343a67f2d01a3778541073a3f7bfb12
  • SHA512 d64724cc97633b0bb7084070900bbfc3375101a7b0f6e83e94a6dfc2055e7c257ba5fa1f0aa0edeae57465f5c90075558bdc88444cddf0d31d7b6eb5a20965f2
  • SSDEEP 12288:CwyYyMbUkdatht7JmkAgprCjrkAgChSTDMEIjUp2rMEI3+NM2p1ghFLIWTRXQ:rBy0UfBLLIWVg
  • TLSH
    T1B5846C2D35B4273FCE56D9BA3990E368007DA0AF8EE013AF9B8D591558282F5793530F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  gendadiscoveryredlineinfostealer

  • Family: RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Detects executables packed with ConfuserEx Mod

  • Suspicious use of SetThreadContext

  behavioral1behavioral2