General
- Target 2026-10-02_bb44f6ba42db0c35bbfcb6ee81e6fb27_amadey_dharma_elex_remcos_smoke-loader_stop
- Size 391KB
- Sample261003-e7zzessvat
- SHA256 6b16b26d373b9477461dc7feb8464b684cab80682ba3a1da1e0d9629ff2e5d5d
- MD5 bb44f6ba42db0c35bbfcb6ee81e6fb27
- SHA1 b8ddb86ab421b6c0640afe23c248b8bc015b3afc
- SHA512 d83be36d148fa7a8725c2216402f74fc46185883c83323fb51b251b6cad7bb88a91b582ed71260fe236ba413a012b7ff81c0d73d33a1d1bc1fcaa3bf2b7828b7
- SSDEEP 6144:BYxw/CFd33GvegoUSbsiK2t8VlpIftMqTDvaGDmIY0oHJhgoGhPQ3rZY:BYyod33Gvego/Ft8kG8OIZoHJhgTPOa
- TLSH T10F84BE20B690C034F5B752F44AB69328B92F7AA1A73451CF52E416EE57387E5EC3270B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_bb44f6ba42db0c35bbfcb6ee81e6fb27_amadey_dharma_elex_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_bb44f6ba42db0c35bbfcb6ee81e6fb27_amadey_dharma_elex_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
UNIKALNO
C2
-
193.233.48.58:43014
Attributes
-
auth_value
1d7803729b21e164718a33f5666a4f7b
Targets
-
- Target 2026-10-02_bb44f6ba42db0c35bbfcb6ee81e6fb27_amadey_dharma_elex_remcos_smoke-loader_stop
- Size 391KB
- SHA256 6b16b26d373b9477461dc7feb8464b684cab80682ba3a1da1e0d9629ff2e5d5d
- MD5 bb44f6ba42db0c35bbfcb6ee81e6fb27
- SHA1 b8ddb86ab421b6c0640afe23c248b8bc015b3afc
- SHA512 d83be36d148fa7a8725c2216402f74fc46185883c83323fb51b251b6cad7bb88a91b582ed71260fe236ba413a012b7ff81c0d73d33a1d1bc1fcaa3bf2b7828b7
- SSDEEP 6144:BYxw/CFd33GvegoUSbsiK2t8VlpIftMqTDvaGDmIY0oHJhgoGhPQ3rZY:BYyod33Gvego/Ft8kG8OIZoHJhgTPOa
- TLSH T10F84BE20B690C034F5B752F44AB69328B92F7AA1A73451CF52E416EE57387E5EC3270B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload