General
-
Target
1cb2ab3bfe3cd784c0d2b744b025981e59abcefa68c6f7ba97309d41a36374c5
-
Size
723KB
-
Sample
230211-xbt3eaeb8w
-
MD5
749b8fb076128c797a22298455fb611f
-
SHA1
e3b41fc04244f13a87a399d9e66965f582abf505
-
SHA256
1cb2ab3bfe3cd784c0d2b744b025981e59abcefa68c6f7ba97309d41a36374c5
-
SHA512
d726661c5a7ab659a97cd6e118709da69b60706e16bc305255f4bd5677735ec5e9d10b65e5ab3086b70e2e3af41598bc5dcf7a2c8eb506646f9af5f6e3097ff4
-
SSDEEP
12288:xMrty902vybYqsPvGzzI+vswGG+jJacCn88MPYIP8s4RTFsB8cx4zDPfXV:Ay6TsPvFOsJG+daTn88MPYIksrLODPd
Static task
static1
Behavioral task
behavioral1
Sample
1cb2ab3bfe3cd784c0d2b744b025981e59abcefa68c6f7ba97309d41a36374c5.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
redline
fusa
193.233.20.12:4132
-
auth_value
a08b2f01bd2af756e38c5dd60e87e697
Targets
-
-
Target
1cb2ab3bfe3cd784c0d2b744b025981e59abcefa68c6f7ba97309d41a36374c5
-
Size
723KB
-
MD5
749b8fb076128c797a22298455fb611f
-
SHA1
e3b41fc04244f13a87a399d9e66965f582abf505
-
SHA256
1cb2ab3bfe3cd784c0d2b744b025981e59abcefa68c6f7ba97309d41a36374c5
-
SHA512
d726661c5a7ab659a97cd6e118709da69b60706e16bc305255f4bd5677735ec5e9d10b65e5ab3086b70e2e3af41598bc5dcf7a2c8eb506646f9af5f6e3097ff4
-
SSDEEP
12288:xMrty902vybYqsPvGzzI+vswGG+jJacCn88MPYIP8s4RTFsB8cx4zDPfXV:Ay6TsPvFOsJG+daTn88MPYIksrLODPd
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-