General
- Target 2026-08-21_4bf743c8e5c9110bae8c67fbf4c325b8_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader
- Size 2.5MB
- Sample260822-swytwahn4w
- SHA256 5e5fad5b2ae188ec049cd78854f6bb71b4347e9a9a84a37de997889b15ef6456
- MD5 4bf743c8e5c9110bae8c67fbf4c325b8
- SHA1 53cb5f9e9be4ba8e4c6d8050183e664d8a71a9ee
- SHA512 0e6b189670561f32cce25ad8f39c5401e9881a90c784f84694dd7770182ca42a5ce325b030f46285455d0b61664816f4827e7c01f54750178159f0959cbd12bb
- SSDEEP 24576:GRsbeEXLnG+nR/UQUX4lp041x9i0foXOhMsXsD:3XLnG+nRcQNP00eOhMd
- TLSH T101C5C03138C18176EDF320B686ECB63686ADE4B0072916DB46D85BFED7606C16F325C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_4bf743c8e5c9110bae8c67fbf4c325b8_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_4bf743c8e5c9110bae8c67fbf4c325b8_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_4bf743c8e5c9110bae8c67fbf4c325b8_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader
- Size 2.5MB
- SHA256 5e5fad5b2ae188ec049cd78854f6bb71b4347e9a9a84a37de997889b15ef6456
- MD5 4bf743c8e5c9110bae8c67fbf4c325b8
- SHA1 53cb5f9e9be4ba8e4c6d8050183e664d8a71a9ee
- SHA512 0e6b189670561f32cce25ad8f39c5401e9881a90c784f84694dd7770182ca42a5ce325b030f46285455d0b61664816f4827e7c01f54750178159f0959cbd12bb
- SSDEEP 24576:GRsbeEXLnG+nR/UQUX4lp041x9i0foXOhMsXsD:3XLnG+nRcQNP00eOhMd
- TLSH T101C5C03138C18176EDF320B686ECB63686ADE4B0072916DB46D85BFED7606C16F325C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Detects executables packed with ConfuserEx Mod
-
Suspicious use of SetThreadContext