General
- Target 2026-09-29_98f93081efad786f2fef11e24ad37307_amadey_elex_karagany_rhadamanthys_smoke-loader_stop
- Size 366KB
- Sample260929-ymyqeaeb72
- SHA256 3f961c1a942c5a377770e56b5e3cca323a64cf85bd9288ca78a7f81d716da984
- MD5 98f93081efad786f2fef11e24ad37307
- SHA1 acf4400d93513948c576bb8b0b9b7773e3f594a1
- SHA512 0e60d03afdfd1b1865ef5e33d436135f06001853028636b6433dcbdc4974d921b0ddcd7434ad1ec0c720ac88912a5123fef0ab7de7e099ef12b0da92b2197628
- SSDEEP 3072:bEQAmsPzR+nULyDI8vUWn8QNpzPKrT5iOCAWDfIH5eyacRClf5glcXj+/erdHm:fApPd+nUeDvb8oSNh5erZRgY9hG
- TLSH T1C684F112F7D0C432E2A196744879E3615B3FF8925634496B77303A6E2FB13C29AB9353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_98f93081efad786f2fef11e24ad37307_amadey_elex_karagany_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_98f93081efad786f2fef11e24ad37307_amadey_elex_karagany_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
50
C2
-
193.106.191.68:23196
Attributes
-
auth_value
8735fcb130c82dd9d353478678d60bde
Targets
-
- Target 2026-09-29_98f93081efad786f2fef11e24ad37307_amadey_elex_karagany_rhadamanthys_smoke-loader_stop
- Size 366KB
- SHA256 3f961c1a942c5a377770e56b5e3cca323a64cf85bd9288ca78a7f81d716da984
- MD5 98f93081efad786f2fef11e24ad37307
- SHA1 acf4400d93513948c576bb8b0b9b7773e3f594a1
- SHA512 0e60d03afdfd1b1865ef5e33d436135f06001853028636b6433dcbdc4974d921b0ddcd7434ad1ec0c720ac88912a5123fef0ab7de7e099ef12b0da92b2197628
- SSDEEP 3072:bEQAmsPzR+nULyDI8vUWn8QNpzPKrT5iOCAWDfIH5eyacRClf5glcXj+/erdHm:fApPd+nUeDvb8oSNh5erZRgY9hG
- TLSH T1C684F112F7D0C432E2A196744879E3615B3FF8925634496B77303A6E2FB13C29AB9353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload