General
- Target 2026-09-30_45f33bbf324accefd1e73d69b4bede08_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 373KB
- Sample260930-n1cpzssxes
- SHA256 5165c4b7b2e6260cd71045e6b436db090a74b983bc6c80eb405ba41b185b2434
- MD5 45f33bbf324accefd1e73d69b4bede08
- SHA1 2b18a09fd2f99d9e3f070e5eaea97ed42e8573f7
- SHA512 d7539655471b6f36e031b1a573e10fae1548b0eb0d5f14cbdc1c77b3fd378595a8c3f5ef522a4493d9121bb166cd841c146423f58820323dab48c9c1014de1da
- SSDEEP 6144:yEgy8ChY3FJRyhWJRKnt93pyN3l4CF7eR6rOLjRfnKW:yEgpChq5wDKdF9Yd
- TLSH T10E84F1127A51D033C1A354315A6AD6B6577FBD325AB998473BA5077E0E303C2AFBA303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_45f33bbf324accefd1e73d69b4bede08_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_45f33bbf324accefd1e73d69b4bede08_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
ww
C2
-
193.106.191.67:44400
Attributes
-
auth_value
5a1b28ccd05953f5c3f99729c12427cc
Targets
-
- Target 2026-09-30_45f33bbf324accefd1e73d69b4bede08_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 373KB
- SHA256 5165c4b7b2e6260cd71045e6b436db090a74b983bc6c80eb405ba41b185b2434
- MD5 45f33bbf324accefd1e73d69b4bede08
- SHA1 2b18a09fd2f99d9e3f070e5eaea97ed42e8573f7
- SHA512 d7539655471b6f36e031b1a573e10fae1548b0eb0d5f14cbdc1c77b3fd378595a8c3f5ef522a4493d9121bb166cd841c146423f58820323dab48c9c1014de1da
- SSDEEP 6144:yEgy8ChY3FJRyhWJRKnt93pyN3l4CF7eR6rOLjRfnKW:yEgpChq5wDKdF9Yd
- TLSH T10E84F1127A51D033C1A354315A6AD6B6577FBD325AB998473BA5077E0E303C2AFBA303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload