General
- Target 2026-11-03_7103566b2cf498ed1fcae28f1ebd61f5_amadey_elex_remcos_smoke-loader
- Size 428KB
- Sample261104-vrz79aes2m
- SHA256 f19a9b46582b4044bf9942e6dc142bd240e7dadd6e6b86ce911a91a187f877ef
- MD5 7103566b2cf498ed1fcae28f1ebd61f5
- SHA1 804012559de846e57b4c1c14eefd97a04e8bc61d
- SHA512 03b9a5f3a82f82152809712e568b4e57c11f78e9f989c88f75931b73044692efd9fca23c2d5f14e413d9ecf55ae3fb4daa36a3b49480f30b1f9358818e380fe6
- SSDEEP 6144:ZhEhUR7NXRNcctWZzL2SeCi+AkDG/Jl7kP6YYUayvLHHZlofiDP9LtQtyfWJ:ZhEhQ1MLm+ANxl7kP6YYUDvLXoEVLOy
- TLSH T11A94BF14ABB0C034F5B716B89A799369B93E79E16B3894CB63C726DE46356D0EC30307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_7103566b2cf498ed1fcae28f1ebd61f5_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_7103566b2cf498ed1fcae28f1ebd61f5_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
bbtt1
C2
-
212.193.30.196:13040
Attributes
-
auth_value
fd6c3db35926ff1b33d500d0fb0ce060
Targets
-
- Target 2026-11-03_7103566b2cf498ed1fcae28f1ebd61f5_amadey_elex_remcos_smoke-loader
- Size 428KB
- SHA256 f19a9b46582b4044bf9942e6dc142bd240e7dadd6e6b86ce911a91a187f877ef
- MD5 7103566b2cf498ed1fcae28f1ebd61f5
- SHA1 804012559de846e57b4c1c14eefd97a04e8bc61d
- SHA512 03b9a5f3a82f82152809712e568b4e57c11f78e9f989c88f75931b73044692efd9fca23c2d5f14e413d9ecf55ae3fb4daa36a3b49480f30b1f9358818e380fe6
- SSDEEP 6144:ZhEhUR7NXRNcctWZzL2SeCi+AkDG/Jl7kP6YYUayvLHHZlofiDP9LtQtyfWJ:ZhEhQ1MLm+ANxl7kP6YYUDvLXoEVLOy
- TLSH T11A94BF14ABB0C034F5B716B89A799369B93E79E16B3894CB63C726DE46356D0EC30307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload