General
- Target 2026-08-22_97aa0ff6af3710441ac1825f3a31b034_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader
- Size 4.8MB
- Sample260823-e17qpasfne
- SHA256 1bc893b0f06e9fdc06506936ccfeccbc197a9e915876ba4d4d99c0dace2cb4bc
- MD5 97aa0ff6af3710441ac1825f3a31b034
- SHA1 5d282e7479c578288ab743558460d4f77813749f
- SHA512 a6aac4525e56fe2b2b43afb2f45639ca9357244617c6f1b61a64b90a6c877a990e71deadd15919673578cf5adf84531ce181520928071652284ef36b1345045c
- SSDEEP 24576:CzWK50bSfpw6+vl8lTr4RU+xGzhBCkbzB+a:ZSfpw6+mlJRWMB+a
- TLSH T18636BF3178C58172EDF330B646ECB63686ADE4B0071515DB06D91BEEDB206C2AF325D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_97aa0ff6af3710441ac1825f3a31b034_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_97aa0ff6af3710441ac1825f3a31b034_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_97aa0ff6af3710441ac1825f3a31b034_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader
- Size 4.8MB
- SHA256 1bc893b0f06e9fdc06506936ccfeccbc197a9e915876ba4d4d99c0dace2cb4bc
- MD5 97aa0ff6af3710441ac1825f3a31b034
- SHA1 5d282e7479c578288ab743558460d4f77813749f
- SHA512 a6aac4525e56fe2b2b43afb2f45639ca9357244617c6f1b61a64b90a6c877a990e71deadd15919673578cf5adf84531ce181520928071652284ef36b1345045c
- SSDEEP 24576:CzWK50bSfpw6+vl8lTr4RU+xGzhBCkbzB+a:ZSfpw6+mlJRWMB+a
- TLSH T18636BF3178C58172EDF330B646ECB63686ADE4B0071515DB06D91BEEDB206C2AF325D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Detects executables packed with ConfuserEx Mod
-
Suspicious use of SetThreadContext