General
-
Target
malware_smoke_872340785
-
Size
555KB
-
Sample
221004-d8pdmsbbc3
-
MD5
8aca37ec5040ccd9e8b5cc4626ed1314
-
SHA1
0b6e6b25b7efc508d70557873006562e271b51ca
-
SHA256
5968788cbfc1686dd0afb55cf9504fd8ededbe8fa182f86621314abf76978efe
-
SHA512
1374a022080f660baa45c0eebd0dd20c8733ccbba500d8d5e0c1340e7bf0daddfc575f9f9993578e9d12f911511022149f61f9849433dd1c91861a2c7673909c
-
SSDEEP
12288:O+W7da6zMf7ZPDXGU+IvafQS03ULaHNqrxlKIQNoIaJG2SJN+AGKfu4K:P0MTZPytpfkEaHNYK3WZ9Kfu4K
Static task
static1
Behavioral task
behavioral1
Sample
malware_smoke_872340785.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
malware_smoke_872340785.exe
Resource
win10v2004-20220901-en
Malware Config
Extracted
redline
5076357887
37.1.213.9:17292
-
auth_value
b1022b77a8ea3300a254df573b6fd16e
Targets
-
-
Target
malware_smoke_872340785
-
Size
555KB
-
MD5
8aca37ec5040ccd9e8b5cc4626ed1314
-
SHA1
0b6e6b25b7efc508d70557873006562e271b51ca
-
SHA256
5968788cbfc1686dd0afb55cf9504fd8ededbe8fa182f86621314abf76978efe
-
SHA512
1374a022080f660baa45c0eebd0dd20c8733ccbba500d8d5e0c1340e7bf0daddfc575f9f9993578e9d12f911511022149f61f9849433dd1c91861a2c7673909c
-
SSDEEP
12288:O+W7da6zMf7ZPDXGU+IvafQS03ULaHNqrxlKIQNoIaJG2SJN+AGKfu4K:P0MTZPytpfkEaHNYK3WZ9Kfu4K
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext
-