General
-
Target
0eb0e703f97a3aa89081f583fed6cd8b3312804cae4f166aeaf354278842afaa
-
Size
2.4MB
-
Sample
221101-kb22sshfg5
-
MD5
64c818e6bf960cded14b063e90dcba15
-
SHA1
45a59649987f64e01a8465626bb13166f1c2e62c
-
SHA256
0eb0e703f97a3aa89081f583fed6cd8b3312804cae4f166aeaf354278842afaa
-
SHA512
c8734967e707cf2ce1ae05d35d04189d5f7d2d0febe371300349ae8b826f5c5eb0c38cb92fccb4af9534b00153d2b8caa4f4264488f01f36ca9ec710713fa156
-
SSDEEP
24576:U2jcZqpYAYt7OSCSMnSo6ert+i16mcv+ioIp6r3ZMh0SLh4RIVal3RuQ55313n:U2oZbmxcmzIp6r3ZQ0Slul3p
Static task
static1
Behavioral task
behavioral1
Sample
0eb0e703f97a3aa89081f583fed6cd8b3312804cae4f166aeaf354278842afaa.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0eb0e703f97a3aa89081f583fed6cd8b3312804cae4f166aeaf354278842afaa.exe
Resource
win10-20220812-en
Malware Config
Extracted
redline
185.148.39.219:47029
-
auth_value
f8868787260be95572b321e957e39e5a
Targets
-
-
Target
0eb0e703f97a3aa89081f583fed6cd8b3312804cae4f166aeaf354278842afaa
-
Size
2.4MB
-
MD5
64c818e6bf960cded14b063e90dcba15
-
SHA1
45a59649987f64e01a8465626bb13166f1c2e62c
-
SHA256
0eb0e703f97a3aa89081f583fed6cd8b3312804cae4f166aeaf354278842afaa
-
SHA512
c8734967e707cf2ce1ae05d35d04189d5f7d2d0febe371300349ae8b826f5c5eb0c38cb92fccb4af9534b00153d2b8caa4f4264488f01f36ca9ec710713fa156
-
SSDEEP
24576:U2jcZqpYAYt7OSCSMnSo6ert+i16mcv+ioIp6r3ZMh0SLh4RIVal3RuQ55313n:U2oZbmxcmzIp6r3ZQ0Slul3p
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext
-