General
- Target 2026-08-21_da051144dad60a70fa6641a695651939_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader
- Size 4.8MB
- Sample260821-29vh2stsav
- SHA256 276d5c53c1dc77ee87362ef94630d5114d2d0cf7fabd6211a6c1eba7c3676c77
- MD5 da051144dad60a70fa6641a695651939
- SHA1 7bcbfb427eba06c052dcee9ee8c59effefbed82b
- SHA512 a2e1335f9908ec5f81db85436cf358f2db781a7af5065bc697bdeeacd3e6d173c220d161986d0565a83adc265dfb4a984f3a2cb95556e271bb0e455a401578b4
- SSDEEP 24576:CzWK50bSfpw6+vl8lTr4RU+xGzhBCkbzB+a:ZSfpw6+mlJRWMB+a
- TLSH T10436BF3178C58172EDF330B646ECB63686ADE4B0071515DB06D91BEEDB206C2AF325D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_da051144dad60a70fa6641a695651939_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_da051144dad60a70fa6641a695651939_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_da051144dad60a70fa6641a695651939_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader
- Size 4.8MB
- SHA256 276d5c53c1dc77ee87362ef94630d5114d2d0cf7fabd6211a6c1eba7c3676c77
- MD5 da051144dad60a70fa6641a695651939
- SHA1 7bcbfb427eba06c052dcee9ee8c59effefbed82b
- SHA512 a2e1335f9908ec5f81db85436cf358f2db781a7af5065bc697bdeeacd3e6d173c220d161986d0565a83adc265dfb4a984f3a2cb95556e271bb0e455a401578b4
- SSDEEP 24576:CzWK50bSfpw6+vl8lTr4RU+xGzhBCkbzB+a:ZSfpw6+mlJRWMB+a
- TLSH T10436BF3178C58172EDF330B646ECB63686ADE4B0071515DB06D91BEEDB206C2AF325D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Detects executables packed with ConfuserEx Mod
-
Suspicious use of SetThreadContext