General
- Target 2026-08-21_0f0c5769440603ae9067f322eb1b1197_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader
- Size 4.8MB
- Sample260822-xrtftaybna
- SHA256 a06d56a296116244984860cf2c412dc4225aae2e6553b1ee58f56ce32cf8763a
- MD5 0f0c5769440603ae9067f322eb1b1197
- SHA1 27311cb3a84959787e322e93deacda328ed86f3f
- SHA512 7454ad26f1de117677b6b0d202807302bac36d8e13342adac038256b100177c6cb2b75166c41f5e74314f8bb77277e7ff8b3e15bf55943435f7853bfadcb9fb7
- SSDEEP 12288:z7q7l6pkq/kW8WGnxRrn6HvGOQrqhsfkVrgkIQuRn+huM5mv4aGhU+2V65AF:K7l6pkq/kW8WG7rn6H4+hkMrn2vd6
- TLSH T10B36AE3179C28172EDE330B646ECB63642ADE4B407151ADB46D81BFED7606C2AF325D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_0f0c5769440603ae9067f322eb1b1197_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_0f0c5769440603ae9067f322eb1b1197_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_0f0c5769440603ae9067f322eb1b1197_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader
- Size 4.8MB
- SHA256 a06d56a296116244984860cf2c412dc4225aae2e6553b1ee58f56ce32cf8763a
- MD5 0f0c5769440603ae9067f322eb1b1197
- SHA1 27311cb3a84959787e322e93deacda328ed86f3f
- SHA512 7454ad26f1de117677b6b0d202807302bac36d8e13342adac038256b100177c6cb2b75166c41f5e74314f8bb77277e7ff8b3e15bf55943435f7853bfadcb9fb7
- SSDEEP 12288:z7q7l6pkq/kW8WGnxRrn6HvGOQrqhsfkVrgkIQuRn+huM5mv4aGhU+2V65AF:K7l6pkq/kW8WG7rn6H4+hkMrn2vd6
- TLSH T10B36AE3179C28172EDE330B646ECB63642ADE4B407151ADB46D81BFED7606C2AF325D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Detects executables packed with ConfuserEx Mod
-
Suspicious use of SetThreadContext