General
-
Target
98c4b88ea63337578782c500fcbf772550ebf2adf11ac28bdec3ff6bc31ff7e3
-
Size
745KB
-
Sample
220613-mmwehafffn
-
MD5
f67bb49bb86906a9ffc771e280f43a85
-
SHA1
b49ab390436229f854ecf2d7bd87792edb637a46
-
SHA256
98c4b88ea63337578782c500fcbf772550ebf2adf11ac28bdec3ff6bc31ff7e3
-
SHA512
aae8f324775595c24366e12b2822d9f445f2e48da63a974b12d4b35701e98cd84eb88b93818dc4a9f893198b1aa37a978dec89f1b64207f9063b9f564081a3f3
Static task
static1
Behavioral task
behavioral1
Sample
98c4b88ea63337578782c500fcbf772550ebf2adf11ac28bdec3ff6bc31ff7e3.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
redline
76
139.99.32.83:43199
-
auth_value
44d461325298129ed3c705440f57962c
Targets
-
-
Target
98c4b88ea63337578782c500fcbf772550ebf2adf11ac28bdec3ff6bc31ff7e3
-
Size
745KB
-
MD5
f67bb49bb86906a9ffc771e280f43a85
-
SHA1
b49ab390436229f854ecf2d7bd87792edb637a46
-
SHA256
98c4b88ea63337578782c500fcbf772550ebf2adf11ac28bdec3ff6bc31ff7e3
-
SHA512
aae8f324775595c24366e12b2822d9f445f2e48da63a974b12d4b35701e98cd84eb88b93818dc4a9f893198b1aa37a978dec89f1b64207f9063b9f564081a3f3
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-