General
- Target 2026-10-02_cf567fe9f79d87b602aa6f5a5e5f4f64_amadey_dharma_elex_remcos_smoke-loader_stop
- Size 386KB
- Sample261003-cwdkyaxhra
- SHA256 cb907ebe7a0684e0a0bec5704915123043161e4e5fcbbad39db438af17576448
- MD5 cf567fe9f79d87b602aa6f5a5e5f4f64
- SHA1 f3a808767ab13e07406704b647b5a28dd46bd613
- SHA512 452e54e5540ebfa1ceda9c9666a0c70071599e0234e79649a6bf24ca465e28a536d29f3e8f28280502f5291b8298f0cf673d051062614d91924b0afa9ff2ccf2
- SSDEEP 6144:LFcayfavlAga69RZ/IjIhqzVIEqLgwENHYrfnQ8uvGw9/5azzHk:LFcaO+ja69RZ/IjY+MENz8uFq
- TLSH T11184CF10BB90D435F5B312F84AB6936CB52E79A0A73451CB52D56AEE5738BE0ED3030B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_cf567fe9f79d87b602aa6f5a5e5f4f64_amadey_dharma_elex_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_cf567fe9f79d87b602aa6f5a5e5f4f64_amadey_dharma_elex_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
UNIKALNO
C2
-
193.233.48.58:43014
Attributes
-
auth_value
1d7803729b21e164718a33f5666a4f7b
Targets
-
- Target 2026-10-02_cf567fe9f79d87b602aa6f5a5e5f4f64_amadey_dharma_elex_remcos_smoke-loader_stop
- Size 386KB
- SHA256 cb907ebe7a0684e0a0bec5704915123043161e4e5fcbbad39db438af17576448
- MD5 cf567fe9f79d87b602aa6f5a5e5f4f64
- SHA1 f3a808767ab13e07406704b647b5a28dd46bd613
- SHA512 452e54e5540ebfa1ceda9c9666a0c70071599e0234e79649a6bf24ca465e28a536d29f3e8f28280502f5291b8298f0cf673d051062614d91924b0afa9ff2ccf2
- SSDEEP 6144:LFcayfavlAga69RZ/IjIhqzVIEqLgwENHYrfnQ8uvGw9/5azzHk:LFcaO+ja69RZ/IjY+MENz8uFq
- TLSH T11184CF10BB90D435F5B312F84AB6936CB52E79A0A73451CB52D56AEE5738BE0ED3030B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload