General
- Target 2026-08-30_76690c475ab990f0d08142426375791b_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 275KB
- Sample260902-xracya1apd
- SHA256 e6cf2ddc727cdc8929d02c5e9ddc6b7486a104d1c6b33d88f4e7f0c86efa4230
- MD5 76690c475ab990f0d08142426375791b
- SHA1 64f77e4e9d33d00684c4fe93f45458521ef1bab9
- SHA512 388db942a7c24f97600e2068eb1106e30e9d9b6a07bbcf5bf2b338c162f09061026cf8920c10e6c2841b0bb4dc2fa999f79a6b7c0c8b0e0b845c65cbcd6c9831
- SSDEEP 6144:+bDKW1LgbdlpTBBvjc/SQPMSlHX+oJZ2hYa:Uh1Lk7pTnvjcKQjdkT
- TLSH T1BE54CF2039C0C1B3C4B6143088E6CA759B7974610779A6D7BB9D2B7A6E313E1B3362CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_76690c475ab990f0d08142426375791b_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_76690c475ab990f0d08142426375791b_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_76690c475ab990f0d08142426375791b_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 275KB
- SHA256 e6cf2ddc727cdc8929d02c5e9ddc6b7486a104d1c6b33d88f4e7f0c86efa4230
- MD5 76690c475ab990f0d08142426375791b
- SHA1 64f77e4e9d33d00684c4fe93f45458521ef1bab9
- SHA512 388db942a7c24f97600e2068eb1106e30e9d9b6a07bbcf5bf2b338c162f09061026cf8920c10e6c2841b0bb4dc2fa999f79a6b7c0c8b0e0b845c65cbcd6c9831
- SSDEEP 6144:+bDKW1LgbdlpTBBvjc/SQPMSlHX+oJZ2hYa:Uh1Lk7pTnvjcKQjdkT
- TLSH T1BE54CF2039C0C1B3C4B6143088E6CA759B7974610779A6D7BB9D2B7A6E313E1B3362CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.