General
- Target 2026-08-21_000412c3170207504e5d3ba9a2a85655_amadey_elex_luca-stealer_lynx_njrat_risepro
- Size 1.2MB
- Sample260822-yskezagc73
- SHA256 c314599c94dc07656a094d2f358969436610f793410a0a699402659c68cd1157
- MD5 000412c3170207504e5d3ba9a2a85655
- SHA1 6a155c2a7281bc370cf298bdb8256b64d38da057
- SHA512 71d3535ad216524dd36247a1f50f3bd8ab3ad6ab42a37238e3cd0dc28ee3c84cfaecedaaffb6443a311b13fba44241b25928609e33b5d2b89a1111f44929318d
- SSDEEP 24576:IhK5UBtdN67JuzUqGoLGxlW1wRglAHYL:8tdN67JuznGxoggCe
- TLSH T1B255AE1238C0C03AD67331320669F7B64ABEE4701B5556EF53E81A7EAF34AC15B3625B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_000412c3170207504e5d3ba9a2a85655_amadey_elex_luca-stealer_lynx_njrat_risepro.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_000412c3170207504e5d3ba9a2a85655_amadey_elex_luca-stealer_lynx_njrat_risepro.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_000412c3170207504e5d3ba9a2a85655_amadey_elex_luca-stealer_lynx_njrat_risepro
- Size 1.2MB
- SHA256 c314599c94dc07656a094d2f358969436610f793410a0a699402659c68cd1157
- MD5 000412c3170207504e5d3ba9a2a85655
- SHA1 6a155c2a7281bc370cf298bdb8256b64d38da057
- SHA512 71d3535ad216524dd36247a1f50f3bd8ab3ad6ab42a37238e3cd0dc28ee3c84cfaecedaaffb6443a311b13fba44241b25928609e33b5d2b89a1111f44929318d
- SSDEEP 24576:IhK5UBtdN67JuzUqGoLGxlW1wRglAHYL:8tdN67JuznGxoggCe
- TLSH T1B255AE1238C0C03AD67331320669F7B64ABEE4701B5556EF53E81A7EAF34AC15B3625B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Detects executables packed with ConfuserEx Mod
-
Suspicious use of SetThreadContext