General
- Target 2026-09-16_d7304ba7bc89219475be27be681348c8_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 295KB
- Sample260916-t3699sdm2t
- SHA256 14dc792a6b34c17026d609fac9a48e150a215b104580ab7930bf2e059600e727
- MD5 d7304ba7bc89219475be27be681348c8
- SHA1 906554f823893b7e918ff64d622054bac663808b
- SHA512 1a4aa30840552cf447fbe2cec993b21ce6040ea673a5aa450aeb046f6e86fb3fe81365c79c165d896776ebf8732c32a7a784a6d1854f0bd6b288490bc3028e9d
- SSDEEP 6144:ADKW1Lgbdl0TBBvjc/ni1tAh13sNS25sudqR:Gh1Lk70Tnvjcqbg8W
- TLSH T125548D1175B0CD72D4B2203F49D69A654A2F28204B66B1D7B79B2BED5E303E1B2371CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_d7304ba7bc89219475be27be681348c8_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_d7304ba7bc89219475be27be681348c8_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
OliverMaxtest100
C2
-
82.115.223.15:15486
Attributes
-
auth_value
f31d31ed9e644f3f842dc7949595870f
Targets
-
- Target 2026-09-16_d7304ba7bc89219475be27be681348c8_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 295KB
- SHA256 14dc792a6b34c17026d609fac9a48e150a215b104580ab7930bf2e059600e727
- MD5 d7304ba7bc89219475be27be681348c8
- SHA1 906554f823893b7e918ff64d622054bac663808b
- SHA512 1a4aa30840552cf447fbe2cec993b21ce6040ea673a5aa450aeb046f6e86fb3fe81365c79c165d896776ebf8732c32a7a784a6d1854f0bd6b288490bc3028e9d
- SSDEEP 6144:ADKW1Lgbdl0TBBvjc/ni1tAh13sNS25sudqR:Gh1Lk70Tnvjcqbg8W
- TLSH T125548D1175B0CD72D4B2203F49D69A654A2F28204B66B1D7B79B2BED5E303E1B2371CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload