General
-
Target
42345.exe
-
Size
1.0MB
-
Sample
230520-kjp27sea8x
-
MD5
15c0d4b500ecdb0536b7af315d9be0bf
-
SHA1
2eb39fdf2e3cf66765e021e26890dc493623c21b
-
SHA256
e53bd8d9458c25d81bfcfd7a9a03572429e86d80d7829ec1e3c24556dfff3f1b
-
SHA512
3ca185cf616210c51e06eac12984509922c8971126c58f187c9e189089a3ea2085b0f2c15e07e43896c25a02e0ff5761ce28a3dd91acdc6d131985ee144f7515
-
SSDEEP
24576:tyhHVPtyp93KZrj94MdDHkCTzGJLnnE8I:I3Ptw93KDLDgJLnE8
Static task
static1
Behavioral task
behavioral1
Sample
42345.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
42345.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
deren
77.91.68.253:19065
-
auth_value
04a169f1fb198bfbeca74d0e06ea2d54
Targets
-
-
Target
42345.exe
-
Size
1.0MB
-
MD5
15c0d4b500ecdb0536b7af315d9be0bf
-
SHA1
2eb39fdf2e3cf66765e021e26890dc493623c21b
-
SHA256
e53bd8d9458c25d81bfcfd7a9a03572429e86d80d7829ec1e3c24556dfff3f1b
-
SHA512
3ca185cf616210c51e06eac12984509922c8971126c58f187c9e189089a3ea2085b0f2c15e07e43896c25a02e0ff5761ce28a3dd91acdc6d131985ee144f7515
-
SSDEEP
24576:tyhHVPtyp93KZrj94MdDHkCTzGJLnnE8I:I3Ptw93KDLDgJLnE8
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-