Extracted

• • Target
    2026-08-21_8ee75aefd2d6b5f8428006beca64cb61_amadey_darkgate_elex_luca-stealer_lynx_njrat
  • Size 5.0MB
  • SHA256 8c5bb0d4f5e1a83d2d8d0ae07b86c29b7a2593b77929cb47f10487b56b873dcb
  • MD5 8ee75aefd2d6b5f8428006beca64cb61
  • SHA1 1db7b1f1e04f259b99d17e5ea9c15714c85b8c36
  • SHA512 28cb9526809104452dbfde1bbfd28afeaa9187f93e8b7b2df755e6407e21583e73d0649124df443ae14817706827b3325bf4b3265f037f93d5cfc549f1f15652
  • SSDEEP 24576:h3egE2RAhvnxOLnTccsKynwIritFHMa6NThfG1ijVUIex:oBvnxOLnDIrit5Ma63fGOVUIe
  • TLSH
    T1E0361C0176F95759F6F30FB86A7AA621487ABC6ADE11C7DF1261900E0D31B90C970B3B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  @yanebyakadiscoveryredlineinfostealer

  • Family: RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Detects executables packed with ConfuserEx Mod

  • Suspicious use of SetThreadContext

  behavioral1behavioral2