General
-
Target
launcher895.exe
-
Size
1.0MB
-
Sample
230522-mwcnraaf8z
-
MD5
bff68732bea83e68b0832c4d2c0f432d
-
SHA1
5d9d47c10a97775991a5cff9685426f765c5bf2a
-
SHA256
f7b700c6ac554c2ec4c6fc724fbcc021753dcbdc43ba1efcff35843dd3c66c6f
-
SHA512
f9441d3f947e8c8d5e2c23f94d3f9ce155ab78fcfab98aedb5e90ef1e4e4ead8e942108252b1944d286d664de3d60843d6570edec1a83eddfd8131a58fb86db3
-
SSDEEP
24576:iyqaRmykAv+7S65YPzvXrhhH20Ipr5MSYr:JnmcvcLCTPtIhK
Static task
static1
Behavioral task
behavioral1
Sample
launcher895.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
launcher895.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
diza
185.161.248.37:4138
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
launcher895.exe
-
Size
1.0MB
-
MD5
bff68732bea83e68b0832c4d2c0f432d
-
SHA1
5d9d47c10a97775991a5cff9685426f765c5bf2a
-
SHA256
f7b700c6ac554c2ec4c6fc724fbcc021753dcbdc43ba1efcff35843dd3c66c6f
-
SHA512
f9441d3f947e8c8d5e2c23f94d3f9ce155ab78fcfab98aedb5e90ef1e4e4ead8e942108252b1944d286d664de3d60843d6570edec1a83eddfd8131a58fb86db3
-
SSDEEP
24576:iyqaRmykAv+7S65YPzvXrhhH20Ipr5MSYr:JnmcvcLCTPtIhK
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-