General
- Target 2026-09-30_a6c00945fb3c7ec9320241220903a811_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 372KB
- Sample260930-kthqwatfnh
- SHA256 82bcd9e471de7f237e90e6b48ccecb8e15c259fd9773693a0887390c212b619c
- MD5 a6c00945fb3c7ec9320241220903a811
- SHA1 68ba72c739a1b1e871bfd96dd518a03dae4da923
- SHA512 d27752d3e824e596ee3be4ee4aeca3fa3a0b5bf4c3de62b52fbb7f48c298bb1c2f98f980d73087ab2542597280f756c15f2586fd4d947ffda795f3cf09ff9d89
- SSDEEP 6144:kEgvubteuAXK77V5i4lZgyaGL9GAmM36lnnRmjx:kEgmtT77Vker5GAX8n
- TLSH T1B484F113BB60C432C6A2A4352926C660EA3F75376A7AC54B779007754E303E1EBBB752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_a6c00945fb3c7ec9320241220903a811_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_a6c00945fb3c7ec9320241220903a811_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
ww
C2
-
193.106.191.67:44400
Attributes
-
auth_value
5a1b28ccd05953f5c3f99729c12427cc
Targets
-
- Target 2026-09-30_a6c00945fb3c7ec9320241220903a811_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 372KB
- SHA256 82bcd9e471de7f237e90e6b48ccecb8e15c259fd9773693a0887390c212b619c
- MD5 a6c00945fb3c7ec9320241220903a811
- SHA1 68ba72c739a1b1e871bfd96dd518a03dae4da923
- SHA512 d27752d3e824e596ee3be4ee4aeca3fa3a0b5bf4c3de62b52fbb7f48c298bb1c2f98f980d73087ab2542597280f756c15f2586fd4d947ffda795f3cf09ff9d89
- SSDEEP 6144:kEgvubteuAXK77V5i4lZgyaGL9GAmM36lnnRmjx:kEgmtT77Vker5GAX8n
- TLSH T1B484F113BB60C432C6A2A4352926C660EA3F75376A7AC54B779007754E303E1EBBB752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload