General
- Target 2026-08-22_022e9111662acd96eb02c015e50aae8c_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader
- Size 4.8MB
- Sample260823-qs3mjsxcnf
- SHA256 0f19d11d982b4b20850a25eadfb089e5eb4fb9eccbe01a72c8074d48929b1641
- MD5 022e9111662acd96eb02c015e50aae8c
- SHA1 ec712d8deca2a9e24a0eeddc2a3d651975f986de
- SHA512 1cf8feebb8f460f6543fec6fdb7c57afb618581b56cdd143d4b28b14b9d9c20c924ab3470374b59fe7917dbdbc6ba86b18f21833d5e3cbbd3d9820f8d714baac
- SSDEEP 12288:z7q7l6pkq/kW8WGnxRrn6HvGOQrqhsfkVrgkIQuRn+huM5mv4aGhU+2V65AF:K7l6pkq/kW8WG7rn6H4+hkMrn2vd6
- TLSH T13136AE3179C28172EDE330B646ECB63642ADE4B407151ADB46D81BFED7606C2AF325D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_022e9111662acd96eb02c015e50aae8c_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_022e9111662acd96eb02c015e50aae8c_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_022e9111662acd96eb02c015e50aae8c_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader
- Size 4.8MB
- SHA256 0f19d11d982b4b20850a25eadfb089e5eb4fb9eccbe01a72c8074d48929b1641
- MD5 022e9111662acd96eb02c015e50aae8c
- SHA1 ec712d8deca2a9e24a0eeddc2a3d651975f986de
- SHA512 1cf8feebb8f460f6543fec6fdb7c57afb618581b56cdd143d4b28b14b9d9c20c924ab3470374b59fe7917dbdbc6ba86b18f21833d5e3cbbd3d9820f8d714baac
- SSDEEP 12288:z7q7l6pkq/kW8WGnxRrn6HvGOQrqhsfkVrgkIQuRn+huM5mv4aGhU+2V65AF:K7l6pkq/kW8WG7rn6H4+hkMrn2vd6
- TLSH T13136AE3179C28172EDE330B646ECB63642ADE4B407151ADB46D81BFED7606C2AF325D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Detects executables packed with ConfuserEx Mod
-
Suspicious use of SetThreadContext