Overview

overview

10

Static

static

3

2026-09-15...ee.exe

windows10-2004-x64

10

2026-09-15...ee.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-09-15_399fa068c793f1f1b818ffcffce4a47f_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 295KB
  • Sample260915-xlds6scr51
  • SHA256 7b77dca2a8568daf51d9739c5f6b4207d87b23ce3404bdeb624cc1f04c9deaf2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
redlinebuild_maindiscoveryinfostealer

Malware Config

Extracted

Family

  • redline

Botnet

  • build_main

C2

  • 80.85.156.168:20189

Attributes
  • auth_value

    5e5c9cacc6d168f8ade7fb6419edb114

Targets

    • Target
      2026-09-15_399fa068c793f1f1b818ffcffce4a47f_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
    • Size 295KB
    • SHA256 7b77dca2a8568daf51d9739c5f6b4207d87b23ce3404bdeb624cc1f04c9deaf2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    build_maindiscoveryredlineinfostealer

    • Family: RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks