General
- Target 9765b808b441a0737441a84a8943ad93.exe
- Size 1.0MB
- Sample230413-pff3cabc32
- SHA256 40847a4d4e64a92ee376c3b0298b8ad36364aab8b2a48c948810f35f4936727a
- MD5 9765b808b441a0737441a84a8943ad93
- SHA1 5c0eae350f72a6d933254fdec5bbbeebb2ccdc36
- SHA512 8815eea8234e5aea167ce29ef5e06f98dcda4316d1f3553aff8404c88226a98967176f51d350949e44283d70858962d1cd61b29d8aabb59f6bc78fedc5a5c8cb
- SSDEEP 6144:8EG69gZsHqXY0kqE2Aoe9WSyO7TAwW52MMQQ0XKvOuOF7J:8xSHR5qcNPoQ0XKvOu07J
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
9765b808b441a0737441a84a8943ad93.exe
Resource
win7-20230220-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
9765b808b441a0737441a84a8943ad93.exe
Resource
win10v2004-20230220-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
C2
-
135.181.241.192:4326
Attributes
-
auth_value
a909e2aaecf96137978fea4f86400b9b
Targets
-
- Target 9765b808b441a0737441a84a8943ad93.exe
- Size 1.0MB
- SHA256 40847a4d4e64a92ee376c3b0298b8ad36364aab8b2a48c948810f35f4936727a
- MD5 9765b808b441a0737441a84a8943ad93
- SHA1 5c0eae350f72a6d933254fdec5bbbeebb2ccdc36
- SHA512 8815eea8234e5aea167ce29ef5e06f98dcda4316d1f3553aff8404c88226a98967176f51d350949e44283d70858962d1cd61b29d8aabb59f6bc78fedc5a5c8cb
- SSDEEP 6144:8EG69gZsHqXY0kqE2Aoe9WSyO7TAwW52MMQQ0XKvOuOF7J:8xSHR5qcNPoQ0XKvOu07J
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext