General
-
Target
f80b159cd3d099a3e40ff671e2544df562639dd0cda61709f9e367288140e414
-
Size
417KB
-
Sample
221226-tg48sadb48
-
MD5
78e835a570494846d421d78058be5d2a
-
SHA1
1531d8eed6cd96b14a79d99b13a0fa62308f3beb
-
SHA256
f80b159cd3d099a3e40ff671e2544df562639dd0cda61709f9e367288140e414
-
SHA512
fe726b39d1dfcdd3c9954d8af71130888b48137d73ffb06a2e7c7458062e36491ca9a8c39281b6cfe9a3a002e30fabdb92f6d1d837ab279960e4ff31f55dc7a5
-
SSDEEP
12288:9uKsohhtrUeKlL/IdaUI5Skb8oQjOi+eP1R:bBUZsdOFQjyeP1
Static task
static1
Behavioral task
behavioral1
Sample
f80b159cd3d099a3e40ff671e2544df562639dd0cda61709f9e367288140e414.exe
Resource
win10-20220812-en
Malware Config
Extracted
redline
11
79.137.202.18:45218
-
auth_value
107e09eee63158d2488feb03dac75204
Targets
-
-
Target
f80b159cd3d099a3e40ff671e2544df562639dd0cda61709f9e367288140e414
-
Size
417KB
-
MD5
78e835a570494846d421d78058be5d2a
-
SHA1
1531d8eed6cd96b14a79d99b13a0fa62308f3beb
-
SHA256
f80b159cd3d099a3e40ff671e2544df562639dd0cda61709f9e367288140e414
-
SHA512
fe726b39d1dfcdd3c9954d8af71130888b48137d73ffb06a2e7c7458062e36491ca9a8c39281b6cfe9a3a002e30fabdb92f6d1d837ab279960e4ff31f55dc7a5
-
SSDEEP
12288:9uKsohhtrUeKlL/IdaUI5Skb8oQjOi+eP1R:bBUZsdOFQjyeP1
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Uses the VBS compiler for execution
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-