General
-
Target
459eed0c50ea623534ea90eba5b10ca4f5c7bfbbe668d7d78432f72e9501d4ed
-
Size
581KB
-
Sample
230605-gb7qhafe7s
-
MD5
7d278bc1d7a94670fb24c4fb1624b51a
-
SHA1
52ac91e3ae38d668589c1a84a6368fb98a1e0091
-
SHA256
459eed0c50ea623534ea90eba5b10ca4f5c7bfbbe668d7d78432f72e9501d4ed
-
SHA512
4e44508189b59aa5481779b9b80ac2e97463a4c4b12724ce2378082d924e878d605892f6dc25710e93226c94561107effda501ea7490cebc435809da84167aab
-
SSDEEP
12288:bMr5y90dDwGz26OaCiZucg1ez8Sw6jZ6pqCHpkJ:yyWkQYiZnoE8ojIET
Static task
static1
Behavioral task
behavioral1
Sample
459eed0c50ea623534ea90eba5b10ca4f5c7bfbbe668d7d78432f72e9501d4ed.exe
Resource
win10-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
459eed0c50ea623534ea90eba5b10ca4f5c7bfbbe668d7d78432f72e9501d4ed
-
Size
581KB
-
MD5
7d278bc1d7a94670fb24c4fb1624b51a
-
SHA1
52ac91e3ae38d668589c1a84a6368fb98a1e0091
-
SHA256
459eed0c50ea623534ea90eba5b10ca4f5c7bfbbe668d7d78432f72e9501d4ed
-
SHA512
4e44508189b59aa5481779b9b80ac2e97463a4c4b12724ce2378082d924e878d605892f6dc25710e93226c94561107effda501ea7490cebc435809da84167aab
-
SSDEEP
12288:bMr5y90dDwGz26OaCiZucg1ez8Sw6jZ6pqCHpkJ:yyWkQYiZnoE8ojIET
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-