General
-
Target
SecuriteInfo.com.Variant.Zusy.465956.29298.4898.exe
-
Size
1.2MB
-
Sample
230504-lycwvsbd79
-
MD5
19df906dcc6832150ea885afe1b37066
-
SHA1
a20000afc543feed9361567c347594e9c7e8b085
-
SHA256
2da30d32c89579b2f31dd1de4c0ea0df0a446feef8a69af55334515369d0263c
-
SHA512
730ca84fab9250ce54ac49571cf0004211cabb4769a2bb86c17afefc757c180e09d2a90d0db18a4176ca974ff328e4b7bd8b59606dd5dc719290752f4bc81240
-
SSDEEP
12288:2s9fXUfFIWfTC0xzIBo4swnD9fvtvYSgry:2soF1nxzIV1vt7O
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Zusy.465956.29298.4898.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Zusy.465956.29298.4898.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
6179190088
dolma.top:40309
-
auth_value
c17ae9056e71cb452caa9c2f02a15fc1
Targets
-
-
Target
SecuriteInfo.com.Variant.Zusy.465956.29298.4898.exe
-
Size
1.2MB
-
MD5
19df906dcc6832150ea885afe1b37066
-
SHA1
a20000afc543feed9361567c347594e9c7e8b085
-
SHA256
2da30d32c89579b2f31dd1de4c0ea0df0a446feef8a69af55334515369d0263c
-
SHA512
730ca84fab9250ce54ac49571cf0004211cabb4769a2bb86c17afefc757c180e09d2a90d0db18a4176ca974ff328e4b7bd8b59606dd5dc719290752f4bc81240
-
SSDEEP
12288:2s9fXUfFIWfTC0xzIBo4swnD9fvtvYSgry:2soF1nxzIV1vt7O
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext
-