General
-
Target
0x000900000001276d6560.dat
-
Size
168KB
-
Sample
230505-wrhhwabh54
-
MD5
4e3e577e6a2213e9a9a507c5fc608b17
-
SHA1
bfa1277b76d6cd66e8399ddd8cb5ad9588e588a0
-
SHA256
f691f11f0ff851056d9662c1af94f8a73555d649af3ef894698ef0f1eeaa6bb3
-
SHA512
079fd94c705fc9e879ce5cc3530f186d25c057443021a57fa862d9f52103983a386f6232c1e25fa902d91bdf2aedec436d7eb2904a37a8062ba73344e63414db
-
SSDEEP
1536:ncJK7qlVZRGW4XqrozC3iGOmE+lrcI2nBCTGqV8buV+jys0ausT83wYk98e8he:nc4VVzxNf3qV0/yNausTb8e8he
Behavioral task
behavioral1
Sample
0x000900000001276d6560.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0x000900000001276d6560.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
life
185.161.248.73:4164
-
auth_value
8685d11953530b68ad5ec703809d9f91
Targets
-
-
Target
0x000900000001276d6560.dat
-
Size
168KB
-
MD5
4e3e577e6a2213e9a9a507c5fc608b17
-
SHA1
bfa1277b76d6cd66e8399ddd8cb5ad9588e588a0
-
SHA256
f691f11f0ff851056d9662c1af94f8a73555d649af3ef894698ef0f1eeaa6bb3
-
SHA512
079fd94c705fc9e879ce5cc3530f186d25c057443021a57fa862d9f52103983a386f6232c1e25fa902d91bdf2aedec436d7eb2904a37a8062ba73344e63414db
-
SSDEEP
1536:ncJK7qlVZRGW4XqrozC3iGOmE+lrcI2nBCTGqV8buV+jys0ausT83wYk98e8he:nc4VVzxNf3qV0/yNausTb8e8he
Score10/10-
Detects Redline Stealer samples
This rule detects the presence of Redline Stealer samples based on their unique strings.
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-