General
-
Target
72d7e0b33b1bbbe20c776479429a273fd8e9f9e659aa55936344bb36848d4172
-
Size
1.0MB
-
Sample
230522-e382jaea69
-
MD5
b0f335aa1dc7ece31eb432576876cf14
-
SHA1
ea85702e5ea01347797c25adeb80f6464b9988d4
-
SHA256
72d7e0b33b1bbbe20c776479429a273fd8e9f9e659aa55936344bb36848d4172
-
SHA512
37da2e35b59eb4f24506bd6b995af3afef8d328445e21101c04f908fba44260720812a151dfbb078def8c135975326dd0ed548f0161e6955e4df8162f9fc1f51
-
SSDEEP
24576:LyXKL2WLjauI1cF3oRKYquFp/vhiDTgufPTRiJUY:+XK3LjaV1ccMuF1yfPTM
Static task
static1
Behavioral task
behavioral1
Sample
72d7e0b33b1bbbe20c776479429a273fd8e9f9e659aa55936344bb36848d4172.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
diza
185.161.248.37:4138
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
72d7e0b33b1bbbe20c776479429a273fd8e9f9e659aa55936344bb36848d4172
-
Size
1.0MB
-
MD5
b0f335aa1dc7ece31eb432576876cf14
-
SHA1
ea85702e5ea01347797c25adeb80f6464b9988d4
-
SHA256
72d7e0b33b1bbbe20c776479429a273fd8e9f9e659aa55936344bb36848d4172
-
SHA512
37da2e35b59eb4f24506bd6b995af3afef8d328445e21101c04f908fba44260720812a151dfbb078def8c135975326dd0ed548f0161e6955e4df8162f9fc1f51
-
SSDEEP
24576:LyXKL2WLjauI1cF3oRKYquFp/vhiDTgufPTRiJUY:+XK3LjaV1ccMuF1yfPTM
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-