General
- Target 2026-09-16_532d6c65012e93cd4d88b2c3438ea791_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 296KB
- Sample260916-1f26csfq91
- SHA256 413fb92ba792abf94a927c4bdebb841e97e1e92c010ef763757b0acef9f659ae
- MD5 532d6c65012e93cd4d88b2c3438ea791
- SHA1 8718fcde78cfc235dc907d61c24494a1db962f1d
- SHA512 f23ea9c009c28a1b0ea226c35fb925da526331f84a54286a9de0da864044d08f7b571fb8e2089ca191738c7f5c850d43a76d204d289822320b9270be0ef5aae5
- SSDEEP 3072:cDKW1LgppLRHMY0TBfJvjcTp5XxxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOu0:cDKW1Lgbdl0TBBvjc/Twyj9zrnPH
- TLSH T17D548D1135B0CD72D4A2213F85D6CA254A2F28214BA6B1D7B79B27ED5E307E1B2371CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_532d6c65012e93cd4d88b2c3438ea791_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_532d6c65012e93cd4d88b2c3438ea791_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
slovo
C2
-
31.41.244.198:4083
Attributes
-
auth_value
b6b22620ca671043ee40c053d9ea48a7
Targets
-
- Target 2026-09-16_532d6c65012e93cd4d88b2c3438ea791_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 296KB
- SHA256 413fb92ba792abf94a927c4bdebb841e97e1e92c010ef763757b0acef9f659ae
- MD5 532d6c65012e93cd4d88b2c3438ea791
- SHA1 8718fcde78cfc235dc907d61c24494a1db962f1d
- SHA512 f23ea9c009c28a1b0ea226c35fb925da526331f84a54286a9de0da864044d08f7b571fb8e2089ca191738c7f5c850d43a76d204d289822320b9270be0ef5aae5
- SSDEEP 3072:cDKW1LgppLRHMY0TBfJvjcTp5XxxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOu0:cDKW1Lgbdl0TBBvjc/Twyj9zrnPH
- TLSH T17D548D1135B0CD72D4A2213F85D6CA254A2F28214BA6B1D7B79B27ED5E307E1B2371CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload