General
-
Target
e6cb7b6bd4848499533b29bdf85f60e362df435c6254d.exe
-
Size
536KB
-
Sample
210721-8b2lxzezf2
-
MD5
a20ebb2a10324b073fd40110d9ee705d
-
SHA1
33cf4d5e7bc35f9ef524ad9eb38c9e229ea128f1
-
SHA256
e6cb7b6bd4848499533b29bdf85f60e362df435c6254d74521ad40dddfb77d1a
-
SHA512
797dcb7dcc6cbfeadc65816ce1bc6dc140fcf7f7255b78cbb26702904af0853e97b614de3d958c3646e2d3f65417d923588836e3c745a50b767ff3db0706ae84
Static task
static1
Behavioral task
behavioral1
Sample
e6cb7b6bd4848499533b29bdf85f60e362df435c6254d.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
e6cb7b6bd4848499533b29bdf85f60e362df435c6254d.exe
Resource
win10v20210410
Malware Config
Extracted
redline
Build2
45.142.213.135:30059
Targets
-
-
Target
e6cb7b6bd4848499533b29bdf85f60e362df435c6254d.exe
-
Size
536KB
-
MD5
a20ebb2a10324b073fd40110d9ee705d
-
SHA1
33cf4d5e7bc35f9ef524ad9eb38c9e229ea128f1
-
SHA256
e6cb7b6bd4848499533b29bdf85f60e362df435c6254d74521ad40dddfb77d1a
-
SHA512
797dcb7dcc6cbfeadc65816ce1bc6dc140fcf7f7255b78cbb26702904af0853e97b614de3d958c3646e2d3f65417d923588836e3c745a50b767ff3db0706ae84
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Suspicious use of SetThreadContext
-