General
-
Target
CloudCheatsSetup611.exe
-
Size
1.0MB
-
Sample
230522-mthrzsae8s
-
MD5
ec17d6ab47c9f62304b5a3344295323f
-
SHA1
cad1cca91444ce77a7ca6500ba0d3fd7eb5d706d
-
SHA256
e620a7fe222cfae8267806ee2380227dc3709d3bfb8adec2e09dde30af7dabe1
-
SHA512
f7a55b44c66fb16d82f3363c5278a84d842d43daeff146864bf54d820ab6a21055e92e9e7dd67b9f8c96e600848c8bb1f8b424d7633da03431305ef245be8a6c
-
SSDEEP
24576:SyTxIznaNb7hMuC5rP4qQSAy3Swb1lzIgTXUg7OGVCkBdDMN:5TWzaNb7h1C1P4qGng3PTYGQGdD
Static task
static1
Behavioral task
behavioral1
Sample
CloudCheatsSetup611.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
CloudCheatsSetup611.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
diza
185.161.248.37:4138
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
CloudCheatsSetup611.exe
-
Size
1.0MB
-
MD5
ec17d6ab47c9f62304b5a3344295323f
-
SHA1
cad1cca91444ce77a7ca6500ba0d3fd7eb5d706d
-
SHA256
e620a7fe222cfae8267806ee2380227dc3709d3bfb8adec2e09dde30af7dabe1
-
SHA512
f7a55b44c66fb16d82f3363c5278a84d842d43daeff146864bf54d820ab6a21055e92e9e7dd67b9f8c96e600848c8bb1f8b424d7633da03431305ef245be8a6c
-
SSDEEP
24576:SyTxIznaNb7hMuC5rP4qQSAy3Swb1lzIgTXUg7OGVCkBdDMN:5TWzaNb7h1C1P4qGng3PTYGQGdD
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-