General
- Target 2026-09-19_91dca85cc8ebcf78689168d777d83cc4_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 224KB
- Sample260919-hb5ftaxeqa
- SHA256 c6dda6d4409a3132075eff02f96181e9717082f1bd9b64a77ebfb03cf3e66061
- MD5 91dca85cc8ebcf78689168d777d83cc4
- SHA1 d20609930db69674f4c16dc515487a3626d49aa8
- SHA512 a49ef601cd590d047668c7f5534efd29be182e473edd8d8e55655d9c3c0ac491fb76dbe3b067491130a7085c543ff65bff5bb8fc39313b8c594918418694c654
- SSDEEP 6144:rDKW1Lgbdl0TBBvjc/nThvPTr8cIKZFcba1Y+jy:fh1Lk70TnvjcvVr8cIKZFcb4y
- TLSH T15024CF207591C1B3C4B7113484E6CB769B393032076A95D7BBDD1BBA6F203E1A3362CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-19_91dca85cc8ebcf78689168d777d83cc4_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-19_91dca85cc8ebcf78689168d777d83cc4_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
RuzkiUNIKALNO
C2
-
193.233.48.58:38989
Attributes
-
auth_value
c504b04cfbdd4bf85ce6195bcb37fba6
Targets
-
- Target 2026-09-19_91dca85cc8ebcf78689168d777d83cc4_drokbk_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 224KB
- SHA256 c6dda6d4409a3132075eff02f96181e9717082f1bd9b64a77ebfb03cf3e66061
- MD5 91dca85cc8ebcf78689168d777d83cc4
- SHA1 d20609930db69674f4c16dc515487a3626d49aa8
- SHA512 a49ef601cd590d047668c7f5534efd29be182e473edd8d8e55655d9c3c0ac491fb76dbe3b067491130a7085c543ff65bff5bb8fc39313b8c594918418694c654
- SSDEEP 6144:rDKW1Lgbdl0TBBvjc/nThvPTr8cIKZFcba1Y+jy:fh1Lk70TnvjcvVr8cIKZFcb4y
- TLSH T15024CF207591C1B3C4B7113484E6CB769B393032076A95D7BBDD1BBA6F203E1A3362CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload