General
- Target 2026-08-21_6e5bf3d41625ba926cf5ea6cbf5db032_amadey_elex_smoke-loader
- Size 450KB
- Sample260822-qcdcqagr4x
- SHA256 c50845d8f6778d76bc0524205d7be033d8f5153d3b91705b5d213c04cfe77d09
- MD5 6e5bf3d41625ba926cf5ea6cbf5db032
- SHA1 092bdd4e474fb94de57ae71dc5c9bdb5c118b44f
- SHA512 572d94a956db89ed5576ba5ff7c4afb487c79ae2eb54795e9342f79a7c5168493a0a5b25d37400dbbf8dfaac2aac33f0f173bdd1daa553effdcb8c8286d98527
- SSDEEP 12288:mKi8mGpzBvZ9wO9X5kOIG+/9e3jqdt3aMPczoZ1m:hrpVvZ9z5pIN9e3ItKO1m
- TLSH T182A4BE00A7A1C035F1B716F449B9A274BA2E7EE16B2491CB53D526FE9B356D0EC3031B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_6e5bf3d41625ba926cf5ea6cbf5db032_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_6e5bf3d41625ba926cf5ea6cbf5db032_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
20201212
C2
-
80.87.192.249:16640
Attributes
-
auth_value
00938fbc99410eb2e8dca000ec5f89db
Targets
-
- Target 2026-08-21_6e5bf3d41625ba926cf5ea6cbf5db032_amadey_elex_smoke-loader
- Size 450KB
- SHA256 c50845d8f6778d76bc0524205d7be033d8f5153d3b91705b5d213c04cfe77d09
- MD5 6e5bf3d41625ba926cf5ea6cbf5db032
- SHA1 092bdd4e474fb94de57ae71dc5c9bdb5c118b44f
- SHA512 572d94a956db89ed5576ba5ff7c4afb487c79ae2eb54795e9342f79a7c5168493a0a5b25d37400dbbf8dfaac2aac33f0f173bdd1daa553effdcb8c8286d98527
- SSDEEP 12288:mKi8mGpzBvZ9wO9X5kOIG+/9e3jqdt3aMPczoZ1m:hrpVvZ9z5pIN9e3ItKO1m
- TLSH T182A4BE00A7A1C035F1B716F449B9A274BA2E7EE16B2491CB53D526FE9B356D0EC3031B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload