General
-
Target
ccfa893b87413c20fa9f3f3b0cc7c7105a7bc77d719bbddd88ebf69e5889bf8e
-
Size
2.6MB
-
Sample
220924-174hhadecl
-
MD5
4858aae32ed575219459121c9f6a7239
-
SHA1
327c34937d995c539509b6c6adacd9e1417be11b
-
SHA256
ccfa893b87413c20fa9f3f3b0cc7c7105a7bc77d719bbddd88ebf69e5889bf8e
-
SHA512
1593c45cc714a817801bfe438033b268ff5dce6a4505e6c9a45e9c6ca328b09098e42be53e7273b9d6ff2ab5124e8a63f891f8ee692aa5a27b134feabf58b92a
-
SSDEEP
24576:MV2/rA4uC4E9iOfG9oYlYbYMQ3umM2idKNj9hfXQXrnkSdey7OLDvqG+l3RuQ55A:z/E4uLnOfGBtnDSdey7Oa9l3c
Static task
static1
Behavioral task
behavioral1
Sample
ccfa893b87413c20fa9f3f3b0cc7c7105a7bc77d719bbddd88ebf69e5889bf8e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ccfa893b87413c20fa9f3f3b0cc7c7105a7bc77d719bbddd88ebf69e5889bf8e.exe
Resource
win10-20220812-en
Malware Config
Extracted
redline
9
94.131.106.63:30947
-
auth_value
2dda76b09bede43f0e8050c835bd27cc
Targets
-
-
Target
ccfa893b87413c20fa9f3f3b0cc7c7105a7bc77d719bbddd88ebf69e5889bf8e
-
Size
2.6MB
-
MD5
4858aae32ed575219459121c9f6a7239
-
SHA1
327c34937d995c539509b6c6adacd9e1417be11b
-
SHA256
ccfa893b87413c20fa9f3f3b0cc7c7105a7bc77d719bbddd88ebf69e5889bf8e
-
SHA512
1593c45cc714a817801bfe438033b268ff5dce6a4505e6c9a45e9c6ca328b09098e42be53e7273b9d6ff2ab5124e8a63f891f8ee692aa5a27b134feabf58b92a
-
SSDEEP
24576:MV2/rA4uC4E9iOfG9oYlYbYMQ3umM2idKNj9hfXQXrnkSdey7OLDvqG+l3RuQ55A:z/E4uLnOfGBtnDSdey7Oa9l3c
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext
-