General
- Target 2026-11-02_b0e609ca29db411f61a993604e0a435e_amadey_elex_remcos_smoke-loader
- Size 413KB
- Sample261103-bs8q8s1x2l
- SHA256 bf31622b8d39a44fe52e9487e186779e170898f185ac1c90fba02d7a27d39a8a
- MD5 b0e609ca29db411f61a993604e0a435e
- SHA1 8a9d03d70e1b32441681f6ce9b9e4ea00e530a9d
- SHA512 5565c189909f5c0ce1da2ce213389e9c057ca77398fed223f3f92a15d579c188b20aa451ca7117775b055d4782e0ac4adaac1d32055e799e729566467008e63b
- SSDEEP 6144:O75XQdc3aSalj7jz1EKPfL9uPIKoQrzVVKK4ZVT:OdXQdcfaJVE00PIKoQrLKK
- TLSH T10594AD107BA0C035F5B716B459B993B8B93F7DB1AB2490CF62D52AEA56346E0DC3070B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_b0e609ca29db411f61a993604e0a435e_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_b0e609ca29db411f61a993604e0a435e_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
6
C2
-
80.87.192.249:16640
Attributes
-
auth_value
3e4c638c72124e45bcf5164456741cce
Targets
-
- Target 2026-11-02_b0e609ca29db411f61a993604e0a435e_amadey_elex_remcos_smoke-loader
- Size 413KB
- SHA256 bf31622b8d39a44fe52e9487e186779e170898f185ac1c90fba02d7a27d39a8a
- MD5 b0e609ca29db411f61a993604e0a435e
- SHA1 8a9d03d70e1b32441681f6ce9b9e4ea00e530a9d
- SHA512 5565c189909f5c0ce1da2ce213389e9c057ca77398fed223f3f92a15d579c188b20aa451ca7117775b055d4782e0ac4adaac1d32055e799e729566467008e63b
- SSDEEP 6144:O75XQdc3aSalj7jz1EKPfL9uPIKoQrzVVKK4ZVT:OdXQdcfaJVE00PIKoQrLKK
- TLSH T10594AD107BA0C035F5B716B459B993B8B93F7DB1AB2490CF62D52AEA56346E0DC3070B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload