Overview

overview

10

Static

static

3

2026-09-16...ee.exe

windows10-2004-x64

10

2026-09-16...ee.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-09-16_1994750a20dfe895befb2932fa056066_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 295KB
  • Sample260916-3lc5jagp6w
  • SHA256 cedbaa628350c8a2d20963b192ac280a27ff0a6f31a417eee712ce32b711319e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
redlinenokiadiscoveryinfostealer

Malware Config

Extracted

Family

  • redline

Botnet

  • nokia

C2

  • 31.41.244.198:4083

Attributes
  • auth_value

    3b38e056d594ae0cf1368e6e1daa3a4e

Targets

    • Target
      2026-09-16_1994750a20dfe895befb2932fa056066_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
    • Size 295KB
    • SHA256 cedbaa628350c8a2d20963b192ac280a27ff0a6f31a417eee712ce32b711319e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    nokiadiscoveryredlineinfostealer

    • Family: RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks