General
-
Target
526293.exe
-
Size
1.0MB
-
Sample
230522-mtgjxsfg64
-
MD5
9f86dac831b9319316c442a4585febe4
-
SHA1
e26fee770d501902c0c96c46f64548e418d159b4
-
SHA256
bee55683c19d138ac2a3087b3a2632902093ec4792ee7d3ed7ee0b0d0d5cc457
-
SHA512
2c70f97368ab5376f36b40bebd5b10445d8cc7732567a940173abadce0232c977a9c5d3af3aa4acac5aaaacde814e7c31d27df936929acb94b73512e4fb6dc62
-
SSDEEP
24576:tytJhGkIq5a9DckgXvUknq6La1GTZQzST7btUcnHKY:Itf5IqI3gfUkXLeGTmzST3tU/
Static task
static1
Behavioral task
behavioral1
Sample
526293.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
526293.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
diza
185.161.248.37:4138
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
526293.exe
-
Size
1.0MB
-
MD5
9f86dac831b9319316c442a4585febe4
-
SHA1
e26fee770d501902c0c96c46f64548e418d159b4
-
SHA256
bee55683c19d138ac2a3087b3a2632902093ec4792ee7d3ed7ee0b0d0d5cc457
-
SHA512
2c70f97368ab5376f36b40bebd5b10445d8cc7732567a940173abadce0232c977a9c5d3af3aa4acac5aaaacde814e7c31d27df936929acb94b73512e4fb6dc62
-
SSDEEP
24576:tytJhGkIq5a9DckgXvUknq6La1GTZQzST7btUcnHKY:Itf5IqI3gfUkXLeGTmzST3tU/
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-