General
-
Target
launcher652.exe
-
Size
1.0MB
-
Sample
230522-mwcczsaf8x
-
MD5
65a5e18f71c3d619e7bf8b78f6fd0ce9
-
SHA1
ca1601edccdcc661a21f05ce620e261828c459b2
-
SHA256
986a1c37256eb0417132ff10cace7d70d877bea5d6b37d5552b0d613ec351276
-
SHA512
79ee59f12f76d6cdfd17dc24b2f75b95a5bfc762b792c2a863eb574b7314742a495ad070e6ff14cef6ffec593eca5d78feaa03941a4418bd2f916ee74ae12cb0
-
SSDEEP
24576:QyvnwOovOS1YWPNrT+sjhQYgjiSmXW92IoydVwQZA2YQ:XYnO0VV6sKjLOWH/r5ZA2
Static task
static1
Behavioral task
behavioral1
Sample
launcher652.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
launcher652.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
diza
185.161.248.37:4138
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
launcher652.exe
-
Size
1.0MB
-
MD5
65a5e18f71c3d619e7bf8b78f6fd0ce9
-
SHA1
ca1601edccdcc661a21f05ce620e261828c459b2
-
SHA256
986a1c37256eb0417132ff10cace7d70d877bea5d6b37d5552b0d613ec351276
-
SHA512
79ee59f12f76d6cdfd17dc24b2f75b95a5bfc762b792c2a863eb574b7314742a495ad070e6ff14cef6ffec593eca5d78feaa03941a4418bd2f916ee74ae12cb0
-
SSDEEP
24576:QyvnwOovOS1YWPNrT+sjhQYgjiSmXW92IoydVwQZA2YQ:XYnO0VV6sKjLOWH/r5ZA2
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-