General
-
Target
a93c39e88748ae1c58bc46449d76159b958d2c0233f6709d13ea71f8f13a42a4
-
Size
1.8MB
-
Sample
211005-rt3vdahhg4
-
MD5
26ac6f38b111522b7802b03d1fa93e5f
-
SHA1
a3f0455e91db6a4f4dea25752eb0074917f50d33
-
SHA256
a93c39e88748ae1c58bc46449d76159b958d2c0233f6709d13ea71f8f13a42a4
-
SHA512
6c809cb685b29621442329c6482882406e6609516cdc4834dad3e3409c8f2a06cbc48b91a2a34d66b0e49ae9180f9ffc1a9a9312479f8694fdc7eb1ca0710e8e
Static task
static1
Behavioral task
behavioral1
Sample
a93c39e88748ae1c58bc46449d76159b958d2c0233f6709d13ea71f8f13a42a4.exe
Resource
win10v20210408
Malware Config
Extracted
redline
new1
185.180.220.105:11915
Targets
-
-
Target
a93c39e88748ae1c58bc46449d76159b958d2c0233f6709d13ea71f8f13a42a4
-
Size
1.8MB
-
MD5
26ac6f38b111522b7802b03d1fa93e5f
-
SHA1
a3f0455e91db6a4f4dea25752eb0074917f50d33
-
SHA256
a93c39e88748ae1c58bc46449d76159b958d2c0233f6709d13ea71f8f13a42a4
-
SHA512
6c809cb685b29621442329c6482882406e6609516cdc4834dad3e3409c8f2a06cbc48b91a2a34d66b0e49ae9180f9ffc1a9a9312479f8694fdc7eb1ca0710e8e
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-