General
- Target 2026-08-20_39745fb8f95b838857e30ffd1b9111d6_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 216KB
- Sample260820-p6vnes1saw
- SHA256 4c3c0018df582a80042b929dfec1b5c4e1bca7ce1be3692ce7da19d213516d09
- MD5 39745fb8f95b838857e30ffd1b9111d6
- SHA1 f9a88f4d508fa6a193e805dcc812c18347e3ab3d
- SHA512 14fa107764c54f125b0de08a321c363034d801c91d250efeaabeefef1fc5594537a72d957527793780861749f184ece6d3c0c8bb38b279de006a8d88f5be99cf
- SSDEEP 6144:3BDKW1Lgbdl0TBBvjc/h6m4scZ0V0UhEUN32:3xh1Lk70TnvjcMLfujhs
- TLSH T1D124BF213581C1B3C8BB153445E6CA799A793031077996D7BBDD2BBA6F103E1A3362CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_39745fb8f95b838857e30ffd1b9111d6_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_39745fb8f95b838857e30ffd1b9111d6_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
tsmc
C2
-
tsmctracking.pro:80
Attributes
-
auth_value
06ff000252c39147f1065ec0a7c9f047
Targets
-
- Target 2026-08-20_39745fb8f95b838857e30ffd1b9111d6_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 216KB
- SHA256 4c3c0018df582a80042b929dfec1b5c4e1bca7ce1be3692ce7da19d213516d09
- MD5 39745fb8f95b838857e30ffd1b9111d6
- SHA1 f9a88f4d508fa6a193e805dcc812c18347e3ab3d
- SHA512 14fa107764c54f125b0de08a321c363034d801c91d250efeaabeefef1fc5594537a72d957527793780861749f184ece6d3c0c8bb38b279de006a8d88f5be99cf
- SSDEEP 6144:3BDKW1Lgbdl0TBBvjc/h6m4scZ0V0UhEUN32:3xh1Lk70TnvjcMLfujhs
- TLSH T1D124BF213581C1B3C8BB153445E6CA799A793031077996D7BBDD2BBA6F103E1A3362CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload