General
- Target setup.exe
- Size 1.1MB
- Sample230423-bvvmdsaa59
- SHA256 bc83cf38e8a0254094978aa996c128cb2d95bac9370b9dbe6c3112a10023df26
- MD5 89ff3329bfa461d4c5f6a43c7fee38f2
- SHA1 ca9cb41fbff8806bee7f7c5bce5cac274c1eae8a
- SHA512 78521b232776e36687026ad8122aa31f1906aa5e0dc9b7f751b56e06095a50db352fb46aaf9574b1eb8c4ab21d0c2315945308ccf575b13b6a57c799e342ef32
- SSDEEP 6144:z8IXHaRijlgDAObnpLPYIxtYxNr7ZyfuoUaY:z8IXHBqffxtYxNnZyW7aY
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230221-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
C2
-
135.181.241.192:4327
Attributes
-
auth_value
a909e2aaecf96137978fea4f86400b9b
Targets
-
- Target setup.exe
- Size 1.1MB
- SHA256 bc83cf38e8a0254094978aa996c128cb2d95bac9370b9dbe6c3112a10023df26
- MD5 89ff3329bfa461d4c5f6a43c7fee38f2
- SHA1 ca9cb41fbff8806bee7f7c5bce5cac274c1eae8a
- SHA512 78521b232776e36687026ad8122aa31f1906aa5e0dc9b7f751b56e06095a50db352fb46aaf9574b1eb8c4ab21d0c2315945308ccf575b13b6a57c799e342ef32
- SSDEEP 6144:z8IXHaRijlgDAObnpLPYIxtYxNr7ZyfuoUaY:z8IXHBqffxtYxNnZyW7aY
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext