General
- Target 2026-08-21_39ebfb156544eb374663d165da7022a5_elex
- Size 2.9MB
- Sample260822-t2nrjafe92
- SHA256 2ae2791739bcf60ca46c1755f8708f785ce040a43484f0d1d73be723e4cb7c7a
- MD5 39ebfb156544eb374663d165da7022a5
- SHA1 8692b30e43f6e9907c3e9785fef7c1687cf83d05
- SHA512 ba50ee24b683c708ba83dec3deff1d9410e3c5f1dc192db59056fc16e85e53998deecf57db2f4ba1ca39bd557ae85a4f92bdfdf73ee96a8d76942b0948fc6bf0
- SSDEEP 24576:G7uEVs7arO53JpSjwuYlYoUYXLudMsXdbsdFn6YL5nfXzunhE+kjabx0dniLBpHY:G6EVs7OOzpSjXWxnSQjUx0dni6l39
- TLSH T115E54C139A8B0D75CED237B451CB633B9734FD30CA2A9B7FBA09C52859532D46C2A742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_39ebfb156544eb374663d165da7022a5_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_39ebfb156544eb374663d165da7022a5_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
test
C2
-
69.176.94.78:32242
Attributes
-
auth_value
8eaf24e91d30670a694213ea634f5a14
Targets
-
- Target 2026-08-21_39ebfb156544eb374663d165da7022a5_elex
- Size 2.9MB
- SHA256 2ae2791739bcf60ca46c1755f8708f785ce040a43484f0d1d73be723e4cb7c7a
- MD5 39ebfb156544eb374663d165da7022a5
- SHA1 8692b30e43f6e9907c3e9785fef7c1687cf83d05
- SHA512 ba50ee24b683c708ba83dec3deff1d9410e3c5f1dc192db59056fc16e85e53998deecf57db2f4ba1ca39bd557ae85a4f92bdfdf73ee96a8d76942b0948fc6bf0
- SSDEEP 24576:G7uEVs7arO53JpSjwuYlYoUYXLudMsXdbsdFn6YL5nfXzunhE+kjabx0dniLBpHY:G6EVs7OOzpSjXWxnSQjUx0dni6l39
- TLSH T115E54C139A8B0D75CED237B451CB633B9734FD30CA2A9B7FBA09C52859532D46C2A742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Detects executables packed with ConfuserEx Mod
-
Suspicious use of SetThreadContext