General
- Target 2026-08-22_467a45a01653a9f489624ba5eb3a693c_amadey_elex_luca-stealer_lynx_njrat
- Size 1.2MB
- Sample260823-k3fmwavend
- SHA256 94c8959a71a4031b44a2ac9aee23825fc9281e4f340d1e3656673be74927d0be
- MD5 467a45a01653a9f489624ba5eb3a693c
- SHA1 4ab7114f418beac6b679250b817106784f8353e4
- SHA512 ccc83f525b0328a274dbfe13417e4ba81c7d58ee56123bef13bef8b66691ee65f2486a017ff809fad99e1a9ab550fcca95ec6f1e6b21810c95a2501e945a380b
- SSDEEP 6144:E4DkUOBpQt3DUevPZykkBayAOYsKOYflO9wtA88YsaoYXbPe8N6AMojVG8:E07OBpQt34lisTYfHtkY5S0G8
- TLSH T1D255CF11B5D1C032D572223209F4EBBA5E7DB9600B6599EF67E00F7E4F307C196326A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_467a45a01653a9f489624ba5eb3a693c_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_467a45a01653a9f489624ba5eb3a693c_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_467a45a01653a9f489624ba5eb3a693c_amadey_elex_luca-stealer_lynx_njrat
- Size 1.2MB
- SHA256 94c8959a71a4031b44a2ac9aee23825fc9281e4f340d1e3656673be74927d0be
- MD5 467a45a01653a9f489624ba5eb3a693c
- SHA1 4ab7114f418beac6b679250b817106784f8353e4
- SHA512 ccc83f525b0328a274dbfe13417e4ba81c7d58ee56123bef13bef8b66691ee65f2486a017ff809fad99e1a9ab550fcca95ec6f1e6b21810c95a2501e945a380b
- SSDEEP 6144:E4DkUOBpQt3DUevPZykkBayAOYsKOYflO9wtA88YsaoYXbPe8N6AMojVG8:E07OBpQt34lisTYfHtkY5S0G8
- TLSH T1D255CF11B5D1C032D572223209F4EBBA5E7DB9600B6599EF67E00F7E4F307C196326A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Detects executables packed with ConfuserEx Mod
-
Suspicious use of SetThreadContext