General
- Target 2026-08-22_fed62a86764d3372619b7c74de4cb4aa_amadey_elex_luca-stealer_lynx_njrat
- Size 1.2MB
- Sample260822-dpslyszhlh
- SHA256 d00a0d50e87aaa98f91d003af8f0d88307a62f3d8dd3dd814c4ae1e29ddf1f48
- MD5 fed62a86764d3372619b7c74de4cb4aa
- SHA1 4e0ead31a8e1657284bbfa5cb701f60d425fe322
- SHA512 5b6bbdd88ba52c71e4b8632cf38133ccde35aa9ebbd4228cd7af949ef0db1c754599bb1d7a258fb1924f6e2c762182387b617365659a057c02be3be82f54e62f
- SSDEEP 6144:UNDkUjBm/43EUUvhZykkBadAOfTsRq5G7neB8mrsH9H71kqRG8:Ux7jBm/43ralTsRq07n39bKoG8
- TLSH T12F55CF10B5D2C072D4B1263209F4EBB65A3DB8604B659DEF67E40F7E4F302D196326AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_fed62a86764d3372619b7c74de4cb4aa_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_fed62a86764d3372619b7c74de4cb4aa_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_fed62a86764d3372619b7c74de4cb4aa_amadey_elex_luca-stealer_lynx_njrat
- Size 1.2MB
- SHA256 d00a0d50e87aaa98f91d003af8f0d88307a62f3d8dd3dd814c4ae1e29ddf1f48
- MD5 fed62a86764d3372619b7c74de4cb4aa
- SHA1 4e0ead31a8e1657284bbfa5cb701f60d425fe322
- SHA512 5b6bbdd88ba52c71e4b8632cf38133ccde35aa9ebbd4228cd7af949ef0db1c754599bb1d7a258fb1924f6e2c762182387b617365659a057c02be3be82f54e62f
- SSDEEP 6144:UNDkUjBm/43EUUvhZykkBadAOfTsRq5G7neB8mrsH9H71kqRG8:Ux7jBm/43ralTsRq07n39bKoG8
- TLSH T12F55CF10B5D2C072D4B1263209F4EBB65A3DB8604B659DEF67E40F7E4F302D196326AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Detects executables packed with ConfuserEx Mod
-
Suspicious use of SetThreadContext