General
- Target 2026-09-15_bdf99b3b943ced4535815e478db0f3fa_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 275KB
- Sample260915-sbf4bsyemc
- SHA256 78ae24917cdb85933f8ca147ba12a06443905f2f7485629c7e31af62b7c3cb89
- MD5 bdf99b3b943ced4535815e478db0f3fa
- SHA1 2e789372fb3a63bc96edc880d073bf7871e1c6d3
- SHA512 30ebeb64322dd6f6dc6adbf7fe06dbc6af97a71eaef75504cb5d66c7d630b1fbd0a40f4b08181051ac30b7b171f2c1c2c26ed22383ba5f3ec689c766e2be9574
- SSDEEP 6144:KDKW1Lgbdl0TBBvjc/vb7WjzGou58k8f9tYa:sh1Lk70TnvjcXWjqoAf8f7Ya
- TLSH T11C54DF213581C1B3C5BA153044E5CB759A7974324B6A96D7BBC82BBB6E303D1B3362CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-15_bdf99b3b943ced4535815e478db0f3fa_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-15_bdf99b3b943ced4535815e478db0f3fa_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-15_bdf99b3b943ced4535815e478db0f3fa_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 275KB
- SHA256 78ae24917cdb85933f8ca147ba12a06443905f2f7485629c7e31af62b7c3cb89
- MD5 bdf99b3b943ced4535815e478db0f3fa
- SHA1 2e789372fb3a63bc96edc880d073bf7871e1c6d3
- SHA512 30ebeb64322dd6f6dc6adbf7fe06dbc6af97a71eaef75504cb5d66c7d630b1fbd0a40f4b08181051ac30b7b171f2c1c2c26ed22383ba5f3ec689c766e2be9574
- SSDEEP 6144:KDKW1Lgbdl0TBBvjc/vb7WjzGou58k8f9tYa:sh1Lk70TnvjcXWjqoAf8f7Ya
- TLSH T11C54DF213581C1B3C5BA153044E5CB759A7974324B6A96D7BBC82BBB6E303D1B3362CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Detects executables packed with ConfuserEx Mod
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.