General
-
Target
cff5f168c026352b47b2ca04d17608b2856a07e1854216fe20cafdf755a7bde9
-
Size
2.5MB
-
Sample
221101-nesjbaccdj
-
MD5
b960f22a874611d236936a6b70c02001
-
SHA1
332ba6c2d43d5c747c2238618e13e5f7b7a4018f
-
SHA256
cff5f168c026352b47b2ca04d17608b2856a07e1854216fe20cafdf755a7bde9
-
SHA512
0f922cfc867d333530bc9f372b3c4f46e685690a0956db8ccbf48727f9762fd7aa49b43f5b8c42a63f99e9790a8020bf9cd23dc08622a5c66406e85c80f2b1f9
-
SSDEEP
24576:XmR/pCYqHbYTYUoY9PSGMKDd4lYQ3TveiCOKU/hsNpgJLk+Hbl3RuQ55313Q:Xm5Vqw9IevO5/hs3gJnl3u
Static task
static1
Behavioral task
behavioral1
Sample
cff5f168c026352b47b2ca04d17608b2856a07e1854216fe20cafdf755a7bde9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cff5f168c026352b47b2ca04d17608b2856a07e1854216fe20cafdf755a7bde9.exe
Resource
win10-20220812-en
Malware Config
Extracted
redline
194.26.229.212:47495
-
auth_value
4ecb8f70a78c110cf5e92deaf5855f22
Targets
-
-
Target
cff5f168c026352b47b2ca04d17608b2856a07e1854216fe20cafdf755a7bde9
-
Size
2.5MB
-
MD5
b960f22a874611d236936a6b70c02001
-
SHA1
332ba6c2d43d5c747c2238618e13e5f7b7a4018f
-
SHA256
cff5f168c026352b47b2ca04d17608b2856a07e1854216fe20cafdf755a7bde9
-
SHA512
0f922cfc867d333530bc9f372b3c4f46e685690a0956db8ccbf48727f9762fd7aa49b43f5b8c42a63f99e9790a8020bf9cd23dc08622a5c66406e85c80f2b1f9
-
SSDEEP
24576:XmR/pCYqHbYTYUoY9PSGMKDd4lYQ3TveiCOKU/hsNpgJLk+Hbl3RuQ55313Q:Xm5Vqw9IevO5/hs3gJnl3u
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext
-