General

  • Target
    2026-08-22_e6fda324e29291f74d527d444659b7a6_amadey_elex_luca-stealer_lynx_njrat
  • Size 1.2MB
  • Sample260822-17se8szenb
  • SHA256 c63f7a906d8df89ff510d785f2288c8ab6abc61c1cd5145dc2b99716db4baa28
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • redline

C2
  • 94.142.138.147:23000

Attributes
  • auth_value

    7d7f131fce61946e3182d2e41a09f15f

Targets

    • Target
      2026-08-22_e6fda324e29291f74d527d444659b7a6_amadey_elex_luca-stealer_lynx_njrat
    • Size 1.2MB
    • SHA256 c63f7a906d8df89ff510d785f2288c8ab6abc61c1cd5145dc2b99716db4baa28
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Detects executables packed with ConfuserEx Mod

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks