General
-
Target
discord_token.exe
-
Size
1.0MB
-
Sample
230520-kkmy8sea91
-
MD5
5331a0c90ee1336a183267d77e0b15a5
-
SHA1
9961ed27bcd7e3a34415a75a11b87af3b5060783
-
SHA256
825dfe48062002a35ba01cb1b4114468be1e478d100b2b63bacd2162c41c806f
-
SHA512
b107d93ea8305e5111d677aafb8667cd9e8e6af4e8a0b61e1fc5aea1f99e58d201a886acb9baa4990cddfbe40ccde3728be79a858effdffe7b44de20c28914cd
-
SSDEEP
24576:ky6x4GJxj08gPdEE0pIjss5tQWkvwOg4yQnE6:zFog88EJs5tQWne
Static task
static1
Behavioral task
behavioral1
Sample
discord_token.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
discord_token.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
deren
77.91.68.253:19065
-
auth_value
04a169f1fb198bfbeca74d0e06ea2d54
Targets
-
-
Target
discord_token.exe
-
Size
1.0MB
-
MD5
5331a0c90ee1336a183267d77e0b15a5
-
SHA1
9961ed27bcd7e3a34415a75a11b87af3b5060783
-
SHA256
825dfe48062002a35ba01cb1b4114468be1e478d100b2b63bacd2162c41c806f
-
SHA512
b107d93ea8305e5111d677aafb8667cd9e8e6af4e8a0b61e1fc5aea1f99e58d201a886acb9baa4990cddfbe40ccde3728be79a858effdffe7b44de20c28914cd
-
SSDEEP
24576:ky6x4GJxj08gPdEE0pIjss5tQWkvwOg4yQnE6:zFog88EJs5tQWne
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-