General
- Target Hack.exe
- Size 350KB
- Sample230515-1pxbgaac84
- SHA256 dbf87d0624b33c36770a628e1dc17682628bd5e83807f17154d0b2938e57f4b4
- MD5 890714434be59ac822f45d4fdf8c8122
- SHA1 f503438594f48e4b5d082db879f1bf82ee8737e8
- SHA512 d1fef8c6ffecb1eee2da0c6494e617bc5419ada647f4013e081c516a5c6fa8e72834e9f68e2cdd58dec66ae2b2c4edfc35366050475086b9ba91a28ccf576567
- SSDEEP 6144:X7HnefrLyXmh9ud1Xx0aTxt8XVwg4MjET0:Xze6y93ct6aqjET
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Hack.exe
Resource
win7-20230220-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Hack.exe
Resource
win10v2004-20230220-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
C2
-
94.142.138.147:48665
Attributes
-
auth_value
523231e501a3476ca1e0b47280cb8095
Targets
-
- Target Hack.exe
- Size 350KB
- SHA256 dbf87d0624b33c36770a628e1dc17682628bd5e83807f17154d0b2938e57f4b4
- MD5 890714434be59ac822f45d4fdf8c8122
- SHA1 f503438594f48e4b5d082db879f1bf82ee8737e8
- SHA512 d1fef8c6ffecb1eee2da0c6494e617bc5419ada647f4013e081c516a5c6fa8e72834e9f68e2cdd58dec66ae2b2c4edfc35366050475086b9ba91a28ccf576567
- SSDEEP 6144:X7HnefrLyXmh9ud1Xx0aTxt8XVwg4MjET0:Xze6y93ct6aqjET
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext