General
-
Target
Solid Hack by Martin.exe
-
Size
1.2MB
-
Sample
220911-hglkwsehbm
-
MD5
82429de4225c154d2ea543b3c2422602
-
SHA1
d10b5b5276a66c4400300780460432f5f58415ed
-
SHA256
18aa9172b642b6f597a1a6c42ba96ce25b095fd897fd3e7f9137c5807d5299f3
-
SHA512
c0d24c7b2f20d31583f5cbe94751681cee217a7daff528789c8dbd1b2e9e0749d36b2b45ecb313604f009a947b9f02c7aeab6b1b2cb6961bedb53c37b1a43ae4
-
SSDEEP
24576:IrAVlHBNAS0YKYMpI7Q7XIMFedhr2DjfsJQw9TAPFN:IrAV1rAcufs5Ad
Static task
static1
Behavioral task
behavioral1
Sample
Solid Hack by Martin.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Solid Hack by Martin.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
redline
185.106.92.8:38644
-
auth_value
cde836c032395a20e781dd6629e44f53
Targets
-
-
Target
Solid Hack by Martin.exe
-
Size
1.2MB
-
MD5
82429de4225c154d2ea543b3c2422602
-
SHA1
d10b5b5276a66c4400300780460432f5f58415ed
-
SHA256
18aa9172b642b6f597a1a6c42ba96ce25b095fd897fd3e7f9137c5807d5299f3
-
SHA512
c0d24c7b2f20d31583f5cbe94751681cee217a7daff528789c8dbd1b2e9e0749d36b2b45ecb313604f009a947b9f02c7aeab6b1b2cb6961bedb53c37b1a43ae4
-
SSDEEP
24576:IrAVlHBNAS0YKYMpI7Q7XIMFedhr2DjfsJQw9TAPFN:IrAV1rAcufs5Ad
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-