General
-
Target
tmp
-
Size
1.1MB
-
Sample
220921-s4zfdagfa6
-
MD5
4cc55e311391d1f40219825674315bf2
-
SHA1
992e42cebf09bdecd7a6fd46e8627b78c5438ff0
-
SHA256
29f9c2e5e05bc0c3f5df610af9fa619974498ad3f9b8b8b359da00ca26c3a4b4
-
SHA512
c3f032768f06b72a0996d3ca4b96e8485e96a865f75d90e6ec1a370bf38d76944729c6a036e656af7d61481f676bf9600549ef56942652fd86acc233c2f3e7c3
-
SSDEEP
12288:Yz81gjoPfaFzhWZVIZ1lxvojGeNtNa8tUpVQkROXnqwoF65O1qEnIa7neK:YYKgyQZVIvlqNR7taRONq9v7eK
Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
redline
Hacked07/09/2022
171.22.30.129:54686
Targets
-
-
Target
tmp
-
Size
1.1MB
-
MD5
4cc55e311391d1f40219825674315bf2
-
SHA1
992e42cebf09bdecd7a6fd46e8627b78c5438ff0
-
SHA256
29f9c2e5e05bc0c3f5df610af9fa619974498ad3f9b8b8b359da00ca26c3a4b4
-
SHA512
c3f032768f06b72a0996d3ca4b96e8485e96a865f75d90e6ec1a370bf38d76944729c6a036e656af7d61481f676bf9600549ef56942652fd86acc233c2f3e7c3
-
SSDEEP
12288:Yz81gjoPfaFzhWZVIZ1lxvojGeNtNa8tUpVQkROXnqwoF65O1qEnIa7neK:YYKgyQZVIvlqNR7taRONq9v7eK
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext
-