General
- Target file.exe
- Size 1.1MB
- Sample230410-r2fd2sca41
- SHA256 3cfe80cbae6944a7e1a8203faec93e45d85929ea6de70e76e9b5890d0b527120
- MD5 8ae47c8391af6dab310f21335c7b3673
- SHA1 8be68d84b606feaa61c03214ba2e6616bb07be3a
- SHA512 4f4281691e8a040afad33c908286410c6c96e6d7468aa58eca60d2657200cc79f0c2caa83f7e1b45b092e45e78667c99c08fd2ca6a6fb7a19eb5b3a60b601e8d
- SSDEEP 3072:OOqwKhYR4gXnTnFaRfUPLwRVomHud30ialfreUwkX4cJsJmJ:O5m4gwFHY0iadDwRcJsJmJ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
TEST
C2
-
135.181.173.163:4326
Attributes
-
auth_value
8a46343f547fa4ff203e369457dfd28d
Targets
-
- Target file.exe
- Size 1.1MB
- SHA256 3cfe80cbae6944a7e1a8203faec93e45d85929ea6de70e76e9b5890d0b527120
- MD5 8ae47c8391af6dab310f21335c7b3673
- SHA1 8be68d84b606feaa61c03214ba2e6616bb07be3a
- SHA512 4f4281691e8a040afad33c908286410c6c96e6d7468aa58eca60d2657200cc79f0c2caa83f7e1b45b092e45e78667c99c08fd2ca6a6fb7a19eb5b3a60b601e8d
- SSDEEP 3072:OOqwKhYR4gXnTnFaRfUPLwRVomHud30ialfreUwkX4cJsJmJ:O5m4gwFHY0iadDwRcJsJmJ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext