General
-
Target
b278d2601750d7ad2090a7801e377396
-
Size
566KB
-
Sample
220323-h8elnahea2
-
MD5
b278d2601750d7ad2090a7801e377396
-
SHA1
8e4cabd6ffb0c36d89bfb7ee9b7705a7d76fbb9f
-
SHA256
df16f9d39345c1a3a1ed404fc6a7c3e5482952e4fa36a7913eb3cddc97950d1c
-
SHA512
41f6afe9f0b429cf5504fefc6ccaaeb00078fce572d16f0ce1cc8caeed9085868f00be4914c61b205269a7e63c5fdc6ea2aa4a638ed7867ace6fe721248c806d
Static task
static1
Behavioral task
behavioral1
Sample
b278d2601750d7ad2090a7801e377396.exe
Resource
win7-20220310-en
Behavioral task
behavioral2
Sample
b278d2601750d7ad2090a7801e377396.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
redline
nam33
103.133.111.182:44839
-
auth_value
8b278c0f8c2de9225b1633fa0e83ddce
Targets
-
-
Target
b278d2601750d7ad2090a7801e377396
-
Size
566KB
-
MD5
b278d2601750d7ad2090a7801e377396
-
SHA1
8e4cabd6ffb0c36d89bfb7ee9b7705a7d76fbb9f
-
SHA256
df16f9d39345c1a3a1ed404fc6a7c3e5482952e4fa36a7913eb3cddc97950d1c
-
SHA512
41f6afe9f0b429cf5504fefc6ccaaeb00078fce572d16f0ce1cc8caeed9085868f00be4914c61b205269a7e63c5fdc6ea2aa4a638ed7867ace6fe721248c806d
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-