General
-
Target
https://telegra.ph/Description-02-12
-
Sample
230522-rq482aha52
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://telegra.ph/Description-02-12
Resource
win10v2004-20230220-en
windows10-2004-x64
19 signatures
300 seconds
Malware Config
Extracted
Family
amadey
Version
3.69
C2
77.91.78.118/u83mfdS2/index.php
Extracted
Family
redline
C2
135.181.10.136:4328
Attributes
-
auth_value
a909e2aaecf96137978fea4f86400b9b
Targets
-
-
Target
https://telegra.ph/Description-02-12
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-