General
-
Target
@MavrodiBlack_alice.exe
-
Size
1.7MB
-
Sample
230516-pjphwshg7v
-
MD5
dcdc4c52c6a415cabd01d1c474e2e864
-
SHA1
b820f7e29b10e9cb1c9ae973e038e44e2ba8c54c
-
SHA256
277d23a2a848349b79d6a9d47cef165e6b8e8e160fed97dec27418bd468e402c
-
SHA512
df2f1bd2d831c7e78eabbeee5547e4ff090289d66c66a84cad0910398ba7c152bc2a133dbda69b541d48173f837505a8321d6ccc51781fb7495c9e2ce2046270
-
SSDEEP
6144:jdrXj45Du9IYEQIq72YAO47tzr8dDvFAW1MNWcqP3nM057h:jdrj45uF1yJEDvqOlX57h
Static task
static1
Behavioral task
behavioral1
Sample
@MavrodiBlack_alice.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
@MavrodiBlack_alice.exe
Resource
win10v2004-20230221-en
Malware Config
Extracted
redline
37.220.87.13:48790
-
auth_value
5ccbd06c4978ff4912009e42060b2daf
Targets
-
-
Target
@MavrodiBlack_alice.exe
-
Size
1.7MB
-
MD5
dcdc4c52c6a415cabd01d1c474e2e864
-
SHA1
b820f7e29b10e9cb1c9ae973e038e44e2ba8c54c
-
SHA256
277d23a2a848349b79d6a9d47cef165e6b8e8e160fed97dec27418bd468e402c
-
SHA512
df2f1bd2d831c7e78eabbeee5547e4ff090289d66c66a84cad0910398ba7c152bc2a133dbda69b541d48173f837505a8321d6ccc51781fb7495c9e2ce2046270
-
SSDEEP
6144:jdrXj45Du9IYEQIq72YAO47tzr8dDvFAW1MNWcqP3nM057h:jdrj45uF1yJEDvqOlX57h
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext
-