General
-
Target
067ea0e0579545b139ed3450c77e31665b778ae33cf784f596bb4f5c88615dd8.bin
-
Size
1.2MB
-
Sample
230506-2m69bsfd8y
-
MD5
f77bbb65f98793e1797f8cd0c39162c4
-
SHA1
76083a41520e62ce852f25194310b43d9d26b8cd
-
SHA256
067ea0e0579545b139ed3450c77e31665b778ae33cf784f596bb4f5c88615dd8
-
SHA512
70f3d803b73ffdd1c9d2001f02155fbd28a99e53d8211637e386df3320425a60ca6b698aa305beafdf0737d2fd0ab2245607e0c17a60d58d1c7c9be3fed69c2c
-
SSDEEP
24576:xyankK4lvenj2GiODrsMK3mg5d651Flu3lHxs3dzuqT/zPY3JIxQ/:kanL0U2asVmg5k51FY3lRs3dhT/zPoJV
Static task
static1
Behavioral task
behavioral1
Sample
067ea0e0579545b139ed3450c77e31665b778ae33cf784f596bb4f5c88615dd8.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
067ea0e0579545b139ed3450c77e31665b778ae33cf784f596bb4f5c88615dd8.exe
Resource
win10v2004-20230221-en
Malware Config
Extracted
redline
gena
185.161.248.73:4164
-
auth_value
d05bf43eef533e262271449829751d07
Extracted
redline
life
185.161.248.73:4164
-
auth_value
8685d11953530b68ad5ec703809d9f91
Targets
-
-
Target
067ea0e0579545b139ed3450c77e31665b778ae33cf784f596bb4f5c88615dd8.bin
-
Size
1.2MB
-
MD5
f77bbb65f98793e1797f8cd0c39162c4
-
SHA1
76083a41520e62ce852f25194310b43d9d26b8cd
-
SHA256
067ea0e0579545b139ed3450c77e31665b778ae33cf784f596bb4f5c88615dd8
-
SHA512
70f3d803b73ffdd1c9d2001f02155fbd28a99e53d8211637e386df3320425a60ca6b698aa305beafdf0737d2fd0ab2245607e0c17a60d58d1c7c9be3fed69c2c
-
SSDEEP
24576:xyankK4lvenj2GiODrsMK3mg5d651Flu3lHxs3dzuqT/zPY3JIxQ/:kanL0U2asVmg5k51FY3lRs3dhT/zPoJV
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-