General
-
Target
7b6bdec3178f0c00645c420142f2d05ba164312cef20c773c19e44ac26c071aa
-
Size
581KB
-
Sample
230605-efgnrsfc5y
-
MD5
b067f64455dadca2127edc2040aa871f
-
SHA1
57bc666f009cddd57e280769b78a069cb66e4aaf
-
SHA256
7b6bdec3178f0c00645c420142f2d05ba164312cef20c773c19e44ac26c071aa
-
SHA512
0933c2ef546f4bde540a7e9c058a712367cdfcb02593412dc621192089c5f36314306ee375e7c1af0f5ce12ba59d204b3436f96830251d1c1fc58c4f6575ddfc
-
SSDEEP
12288:eMrqy90e8M793DTUzaRGTWd+qTknY239+IXTdnZRnQ:4yL8MJzTU83vknY23oE1Q
Static task
static1
Behavioral task
behavioral1
Sample
7b6bdec3178f0c00645c420142f2d05ba164312cef20c773c19e44ac26c071aa.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
diza
83.97.73.126:19046
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
7b6bdec3178f0c00645c420142f2d05ba164312cef20c773c19e44ac26c071aa
-
Size
581KB
-
MD5
b067f64455dadca2127edc2040aa871f
-
SHA1
57bc666f009cddd57e280769b78a069cb66e4aaf
-
SHA256
7b6bdec3178f0c00645c420142f2d05ba164312cef20c773c19e44ac26c071aa
-
SHA512
0933c2ef546f4bde540a7e9c058a712367cdfcb02593412dc621192089c5f36314306ee375e7c1af0f5ce12ba59d204b3436f96830251d1c1fc58c4f6575ddfc
-
SSDEEP
12288:eMrqy90e8M793DTUzaRGTWd+qTknY239+IXTdnZRnQ:4yL8MJzTU83vknY23oE1Q
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-