General
- Target 2026-08-22_3c86ab2e59d581324684dcf12501ac4f_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader
- Size 4.8MB
- Sample260823-ln3drsfp9y
- SHA256 bc0be8a8d22bde48bde9f624a2c7078983b03836a53802595cdf8776611b76c9
- MD5 3c86ab2e59d581324684dcf12501ac4f
- SHA1 00ec32f4b1e7a17f21d3a183fa21b0449f089e6b
- SHA512 515082b0dd80ba3d002ab50044e14f4dbc12835d1cfd4d55164008e1f4497a089292c00c5352d02ed10c191ebc730e0922ba9000600cf84a8b3b94cf99b99772
- SSDEEP 12288:z7q7l6pkq/kW8WGnxRrn6HvGOQrqhsfkVrgkIQuRn+huM5mv4aGhU+2V65AF:K7l6pkq/kW8WG7rn6H4+hkMrn2vd6
- TLSH T10B36AE3179C28172EDE330B646ECB63642ADE4B407151ADB46D81BFED7606C2AF325D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_3c86ab2e59d581324684dcf12501ac4f_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_3c86ab2e59d581324684dcf12501ac4f_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_3c86ab2e59d581324684dcf12501ac4f_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader
- Size 4.8MB
- SHA256 bc0be8a8d22bde48bde9f624a2c7078983b03836a53802595cdf8776611b76c9
- MD5 3c86ab2e59d581324684dcf12501ac4f
- SHA1 00ec32f4b1e7a17f21d3a183fa21b0449f089e6b
- SHA512 515082b0dd80ba3d002ab50044e14f4dbc12835d1cfd4d55164008e1f4497a089292c00c5352d02ed10c191ebc730e0922ba9000600cf84a8b3b94cf99b99772
- SSDEEP 12288:z7q7l6pkq/kW8WGnxRrn6HvGOQrqhsfkVrgkIQuRn+huM5mv4aGhU+2V65AF:K7l6pkq/kW8WG7rn6H4+hkMrn2vd6
- TLSH T10B36AE3179C28172EDE330B646ECB63642ADE4B407151ADB46D81BFED7606C2AF325D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Detects executables packed with ConfuserEx Mod
-
Suspicious use of SetThreadContext