General
-
Target
multiplayer398.exe
-
Size
1.0MB
-
Sample
230521-xfzhpabg46
-
MD5
39197cee6c710965e2499e3e4dbe00dd
-
SHA1
9a7897a25e72948ed36e2b5e0a958868df4a04d2
-
SHA256
057bac45b0f9d57d7027659e80d87f61ee6e9a47eb36fcbbce8e1ef9104836d5
-
SHA512
c11b0bc11c74ba26c6259bd2884f2177fe2e8595d12123fc8d83aa5e9b5af6c4a57175fa8a8f5a8ef11ff0d8ba92962a2aaf8dadbeb3adc099d5bad10ff0b498
-
SSDEEP
24576:ryFtiPTCNcjsptyfN1Fq2TO4Ewma8cHE:eFtgwXC1Fd8c
Static task
static1
Behavioral task
behavioral1
Sample
multiplayer398.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
multiplayer398.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
diza
185.161.248.37:4138
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
multiplayer398.exe
-
Size
1.0MB
-
MD5
39197cee6c710965e2499e3e4dbe00dd
-
SHA1
9a7897a25e72948ed36e2b5e0a958868df4a04d2
-
SHA256
057bac45b0f9d57d7027659e80d87f61ee6e9a47eb36fcbbce8e1ef9104836d5
-
SHA512
c11b0bc11c74ba26c6259bd2884f2177fe2e8595d12123fc8d83aa5e9b5af6c4a57175fa8a8f5a8ef11ff0d8ba92962a2aaf8dadbeb3adc099d5bad10ff0b498
-
SSDEEP
24576:ryFtiPTCNcjsptyfN1Fq2TO4Ewma8cHE:eFtgwXC1Fd8c
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-