General
- Target 2026-10-30_13c432565fef276ed8755786716bd289_amadey_elex_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 315KB
- Sample261031-kbn5yaas2w
- SHA256 a6623d4c87aaa68a1397fd17c8dea813d75b5cfa4104af2b72bd0e7cda709cbf
- MD5 13c432565fef276ed8755786716bd289
- SHA1 6567fc1bbdbf204da1da9428991d7de946293f53
- SHA512 eb20b9ad4aa4e17bdd2381a76ad720bfe38f6b2cc85eddaab8cbb27b95524814527d523c37e65de8763b523f0a9dc3504e2cae5604708b89c5ae583724df7c62
- SSDEEP 6144:f6e/iztD0b7fwMdm099ccjmnT3/GrlBgKgdxOp3wSSrTjag2:fp/tXhdnvmn7/Grk+p3whrT2
- TLSH T1B464E03172A0C432E0A76E304439CFA15A7EBD121A71428F73B4EB696F762C1593A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-30_13c432565fef276ed8755786716bd289_amadey_elex_remcos_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-30_13c432565fef276ed8755786716bd289_amadey_elex_remcos_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
AF2
C2
-
stcontact.top:80
Attributes
-
auth_value
4d729a2faecb406a0eb1d6fcf30432fa
Targets
-
- Target 2026-10-30_13c432565fef276ed8755786716bd289_amadey_elex_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 315KB
- SHA256 a6623d4c87aaa68a1397fd17c8dea813d75b5cfa4104af2b72bd0e7cda709cbf
- MD5 13c432565fef276ed8755786716bd289
- SHA1 6567fc1bbdbf204da1da9428991d7de946293f53
- SHA512 eb20b9ad4aa4e17bdd2381a76ad720bfe38f6b2cc85eddaab8cbb27b95524814527d523c37e65de8763b523f0a9dc3504e2cae5604708b89c5ae583724df7c62
- SSDEEP 6144:f6e/iztD0b7fwMdm099ccjmnT3/GrlBgKgdxOp3wSSrTjag2:fp/tXhdnvmn7/Grk+p3whrT2
- TLSH T1B464E03172A0C432E0A76E304439CFA15A7EBD121A71428F73B4EB696F762C1593A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload