General
- Target 2026-08-23_18ce52ebcc252cc338ccb56c2e051ebd_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 1.2MB
- Sample260824-tykkps1and
- SHA256 d5fec81f516690df82d5afb3160ef34724e79416f50db7bdb5f5b04c5163de17
- MD5 18ce52ebcc252cc338ccb56c2e051ebd
- SHA1 a287459c1f55888b46ef8b397f6bd58ea77e9e08
- SHA512 f4c9c6558c6f042ed5b82cc88e7ee5cbc7aebdf1150de85adf6bd98861786bd46f1a875ea991d688faa91a894f9fee3f190c10b2ef43c0af0a2dd5ec1c415702
- SSDEEP 6144:JnuU7CQ5kkwOu8rxAOLsc4zPRFa5qhKl+j9h9IWCvSvi:Jnd7CQ5/tD4dFa6Kl+jb9IpvSvi
- TLSH T15955CE1079D1C032D1B215310AF4DABA9A3EB9614B659DEF27A40F7E0F342C2DB356A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_18ce52ebcc252cc338ccb56c2e051ebd_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_18ce52ebcc252cc338ccb56c2e051ebd_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_18ce52ebcc252cc338ccb56c2e051ebd_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 1.2MB
- SHA256 d5fec81f516690df82d5afb3160ef34724e79416f50db7bdb5f5b04c5163de17
- MD5 18ce52ebcc252cc338ccb56c2e051ebd
- SHA1 a287459c1f55888b46ef8b397f6bd58ea77e9e08
- SHA512 f4c9c6558c6f042ed5b82cc88e7ee5cbc7aebdf1150de85adf6bd98861786bd46f1a875ea991d688faa91a894f9fee3f190c10b2ef43c0af0a2dd5ec1c415702
- SSDEEP 6144:JnuU7CQ5kkwOu8rxAOLsc4zPRFa5qhKl+j9h9IWCvSvi:Jnd7CQ5/tD4dFa6Kl+jb9IpvSvi
- TLSH T15955CE1079D1C032D1B215310AF4DABA9A3EB9614B659DEF27A40F7E0F342C2DB356A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Detects executables packed with ConfuserEx Mod
-
Suspicious use of SetThreadContext