General
-
Target
ab91e4803417bc6c3414ce4ac7f80f181d742d79e8756d64ca4833bef0ac9ff1.zip
-
Size
507KB
-
Sample
230426-gstvzahd2x
-
MD5
f073cd12e2baa9d265018cf65476692c
-
SHA1
8e57a4a770afdceab82c65ccd68ad42a7336c0d1
-
SHA256
41b88d86f1edce5ff233e6517a49486bd4fa572edf6561ef187c765916c1c3af
-
SHA512
552327180b75fa20ffd6e3c19bf7dc49b52bc795d300ed8dedcb5652361302d38126b84060a88c45333889d90450dda9165daccf61de8f0ea84fa313117522ea
-
SSDEEP
12288:6CoYJJYROCG8VhhqBn8OItiXNF7qxLm2wbNs6:6CoY4ROCGUMBn37XNcdmXps6
Static task
static1
Behavioral task
behavioral1
Sample
ab91e4803417bc6c3414ce4ac7f80f181d742d79e8756d64ca4833bef0ac9ff1.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ab91e4803417bc6c3414ce4ac7f80f181d742d79e8756d64ca4833bef0ac9ff1.exe
Resource
win10v2004-20230221-en
Malware Config
Extracted
redline
37.220.87.13:48790
-
auth_value
3711eaf31ccedd7df80af177dba5d1cc
Targets
-
-
Target
ab91e4803417bc6c3414ce4ac7f80f181d742d79e8756d64ca4833bef0ac9ff1
-
Size
787KB
-
MD5
e7f3c79a7ccdbb0d41bddedcba03af91
-
SHA1
fc6f3f5921f4608bd394a6e3eb1a6dc1cec53209
-
SHA256
ab91e4803417bc6c3414ce4ac7f80f181d742d79e8756d64ca4833bef0ac9ff1
-
SHA512
e84c0ff61a3a104378e0a34ed78b0cf7561c8a39889928649251332e9b6b0803469d53a0dc8ac6d5216c518ebe3cece0bd0d378791756e3978cd9fc5ffa7f969
-
SSDEEP
24576:b1tRxsHztPruUBL4dtl/UhebsgaReNHTvaTC3c:RxqNtLIfEebNHbaus
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext
-