General
- Target 2026-09-15_77cedfe65ccd8c7a1ed3d1f31a73e2ca_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 295KB
- Sample260915-vk7czscj7x
- SHA256 0fbb7b2095199f922a0ad1b7580bf4c14a01a06a1cfabec88f42e7d50371ace6
- MD5 77cedfe65ccd8c7a1ed3d1f31a73e2ca
- SHA1 f512090d4e3893c27d7dbb0e498c01229e02e9b8
- SHA512 8c9f063263803bb6862c2c28d4d23378d642d91441a62424d3bb7a1dc24eb362cf0beac440235a094ff0493288c935b8775046769cbbce62f0fb3cf5c138465a
- SSDEEP 3072:QDKW1LgppLRHMY0TBfJvjcTp5X/xNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuA:QDKW1Lgbdl0TBBvjc/PkL8OL87L7
- TLSH T16C548D1135B0CD72D0B2203F45D69A25592F28214BAAB5D7B79B27ED5E303E1B2372CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-15_77cedfe65ccd8c7a1ed3d1f31a73e2ca_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-15_77cedfe65ccd8c7a1ed3d1f31a73e2ca_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
buggy
C2
-
62.204.41.159:4062
Attributes
-
auth_value
f3bd7e0e0304fca899cd8bf6146ba4b3
Targets
-
- Target 2026-09-15_77cedfe65ccd8c7a1ed3d1f31a73e2ca_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 295KB
- SHA256 0fbb7b2095199f922a0ad1b7580bf4c14a01a06a1cfabec88f42e7d50371ace6
- MD5 77cedfe65ccd8c7a1ed3d1f31a73e2ca
- SHA1 f512090d4e3893c27d7dbb0e498c01229e02e9b8
- SHA512 8c9f063263803bb6862c2c28d4d23378d642d91441a62424d3bb7a1dc24eb362cf0beac440235a094ff0493288c935b8775046769cbbce62f0fb3cf5c138465a
- SSDEEP 3072:QDKW1LgppLRHMY0TBfJvjcTp5X/xNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuA:QDKW1Lgbdl0TBBvjc/PkL8OL87L7
- TLSH T16C548D1135B0CD72D0B2203F45D69A25592F28214BAAB5D7B79B27ED5E303E1B2372CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload