General
- Target 2026-08-22_e6fda324e29291f74d527d444659b7a6_amadey_elex_luca-stealer_lynx_njrat
- Size 1.2MB
- Sample260822-17se8szenb
- SHA256 c63f7a906d8df89ff510d785f2288c8ab6abc61c1cd5145dc2b99716db4baa28
- MD5 e6fda324e29291f74d527d444659b7a6
- SHA1 a34bd1bcc9d3cb716c48bf5b7c04212b3f3184c5
- SHA512 9f0f8e80b4219a06f8ce794d2dd84fccdf8397dd591d22b134065cab65f40f0434798c0656f74b5030bd1a01bc890314a3e3ac093e0945ba37dbe0d494347e80
- SSDEEP 6144:Ny6LxIi4f9tEbThmvignqkAOhfZyV0OLWyAiIxrt2PPOROxNi:NVOvf9tiTaLfZyCyAiIxrtumoxNi
- TLSH T14E55CF11B4D1C432D472253209F0EBBA5A7EB9300B659AEF67D40F7E5F202D09631ABB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_e6fda324e29291f74d527d444659b7a6_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_e6fda324e29291f74d527d444659b7a6_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
C2
-
94.142.138.147:23000
Attributes
-
auth_value
7d7f131fce61946e3182d2e41a09f15f
Targets
-
- Target 2026-08-22_e6fda324e29291f74d527d444659b7a6_amadey_elex_luca-stealer_lynx_njrat
- Size 1.2MB
- SHA256 c63f7a906d8df89ff510d785f2288c8ab6abc61c1cd5145dc2b99716db4baa28
- MD5 e6fda324e29291f74d527d444659b7a6
- SHA1 a34bd1bcc9d3cb716c48bf5b7c04212b3f3184c5
- SHA512 9f0f8e80b4219a06f8ce794d2dd84fccdf8397dd591d22b134065cab65f40f0434798c0656f74b5030bd1a01bc890314a3e3ac093e0945ba37dbe0d494347e80
- SSDEEP 6144:Ny6LxIi4f9tEbThmvignqkAOhfZyV0OLWyAiIxrt2PPOROxNi:NVOvf9tiTaLfZyCyAiIxrtumoxNi
- TLSH T14E55CF11B4D1C432D472253209F0EBBA5A7EB9300B659AEF67D40F7E5F202D09631ABB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Detects executables packed with ConfuserEx Mod
-
Suspicious use of SetThreadContext