General
-
Target
12887071f0bbba92ce818f6e06da06e373f58c0300a58915a84e505ef78f16f9
-
Size
751KB
-
Sample
230601-aah77abf53
-
MD5
fe79a74f03af7dbae1f762b8809f5b83
-
SHA1
3087164d75c90daffa167a3972c017a389651823
-
SHA256
12887071f0bbba92ce818f6e06da06e373f58c0300a58915a84e505ef78f16f9
-
SHA512
6f94e8e2c6b5e1f5cf75349d7cff280586e32b2990215d9d136908e3ea902dd896c30e07e19922937677d7fddeff37b9602881fa3f399ae94f2ad04cc29a4cc3
-
SSDEEP
12288:iMrty90hvZoi1L0dq8Lj0TaA5Cu9naMuXxwXU0vD+z6wwOlsSObydzhOcBOibG:Xya+C0d1j0TaA5XVaMuX6Xjy/wjSOby+
Static task
static1
Behavioral task
behavioral1
Sample
12887071f0bbba92ce818f6e06da06e373f58c0300a58915a84e505ef78f16f9.exe
Resource
win10v2004-20230221-en
Malware Config
Extracted
redline
diza
83.97.73.127:19045
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
12887071f0bbba92ce818f6e06da06e373f58c0300a58915a84e505ef78f16f9
-
Size
751KB
-
MD5
fe79a74f03af7dbae1f762b8809f5b83
-
SHA1
3087164d75c90daffa167a3972c017a389651823
-
SHA256
12887071f0bbba92ce818f6e06da06e373f58c0300a58915a84e505ef78f16f9
-
SHA512
6f94e8e2c6b5e1f5cf75349d7cff280586e32b2990215d9d136908e3ea902dd896c30e07e19922937677d7fddeff37b9602881fa3f399ae94f2ad04cc29a4cc3
-
SSDEEP
12288:iMrty90hvZoi1L0dq8Lj0TaA5Cu9naMuXxwXU0vD+z6wwOlsSObydzhOcBOibG:Xya+C0d1j0TaA5XVaMuX6Xjy/wjSOby+
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-