General
-
Target
file.exe
-
Size
581KB
-
Sample
230605-cjzmmsee65
-
MD5
7fd8e27f84cae9e9a0ad97cac4c82f9b
-
SHA1
065d24760ddc93a5388c2c292927d0028df2afd8
-
SHA256
8d51c0c45b65c209659c51316e70248666bf222edde342c05de339b08a321dde
-
SHA512
7e574b28bf709c251617a6805c6fb74caee5eb068897de216b4fa3dcf400f5155350de4f38fc86f02f12d1f44c42a8a1dc13dfdccd72bb6b1bd608353763e304
-
SSDEEP
12288:/MrDy90Xn9rDlvopmX3uyVEbshemzZu3ICmH:wyy93juyVEbyFzZSjq
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
file.exe
-
Size
581KB
-
MD5
7fd8e27f84cae9e9a0ad97cac4c82f9b
-
SHA1
065d24760ddc93a5388c2c292927d0028df2afd8
-
SHA256
8d51c0c45b65c209659c51316e70248666bf222edde342c05de339b08a321dde
-
SHA512
7e574b28bf709c251617a6805c6fb74caee5eb068897de216b4fa3dcf400f5155350de4f38fc86f02f12d1f44c42a8a1dc13dfdccd72bb6b1bd608353763e304
-
SSDEEP
12288:/MrDy90Xn9rDlvopmX3uyVEbshemzZu3ICmH:wyy93juyVEbyFzZSjq
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-