Extracted

• • Target
    2026-08-10_afc822eda4d0dc820579e01a0cb5fbe8_amadey_darkgate_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader
  • Size 1.9MB
  • SHA256 8fb1d5fb2276bf8901f989994d11d111472c57222ac9ddb63e1c76d6bdfb97d6
  • MD5 afc822eda4d0dc820579e01a0cb5fbe8
  • SHA1 b8df1342fb2f5ff387a6bc2eec33bf98e571e7bd
  • SHA512 04fb3386d95d3845bd197c8cc522bad3a2a47afac3f0989a8724d889428ac7ab4761debf6e0256021301a3b52ac96116447b87c81fcf4ff3952925c5d9a32720
  • SSDEEP 24576:cng0rGWoHIsS8PjwxC+p6B6a9DhvhlpTJ7hozY:cDoHIsS8b+sB6a3v9J7hb
  • TLSH
    T1D1953C1176F95B59F5F34EB876BAA611483ABCA9CF11C2DF1261A08E0831AD49C70F37
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  plostdiscoveryredlineinfostealer

  • Family: RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Detects executables packed with ConfuserEx Mod

  • Suspicious use of SetThreadContext

  behavioral1behavioral2