General
-
Target
0fcf50dd961c255389e709f159012c3326e1363e833c4373422fb01070e57d3d
-
Size
580KB
-
Sample
230605-gfmacsfe8s
-
MD5
ccc295c80487159aee8aa637fd6ebdee
-
SHA1
1123e190199f2f7760ff7f046375ba0865202f5d
-
SHA256
0fcf50dd961c255389e709f159012c3326e1363e833c4373422fb01070e57d3d
-
SHA512
8664a1dca420a5816788251076818edf47ea2795490fe9e843bf4f5b81fb6046baaa81cbd1a8f3b17fc386b711d92458e6d8e75e7502f1833bf33d6cc5d3d132
-
SSDEEP
12288:MMrjy90HGR2AZK9N7peW6vH7GzeynPo9K4ejwiMPja99L6P:nyrA9udvbGxP1BjPcjaf6P
Static task
static1
Behavioral task
behavioral1
Sample
0fcf50dd961c255389e709f159012c3326e1363e833c4373422fb01070e57d3d.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
0fcf50dd961c255389e709f159012c3326e1363e833c4373422fb01070e57d3d
-
Size
580KB
-
MD5
ccc295c80487159aee8aa637fd6ebdee
-
SHA1
1123e190199f2f7760ff7f046375ba0865202f5d
-
SHA256
0fcf50dd961c255389e709f159012c3326e1363e833c4373422fb01070e57d3d
-
SHA512
8664a1dca420a5816788251076818edf47ea2795490fe9e843bf4f5b81fb6046baaa81cbd1a8f3b17fc386b711d92458e6d8e75e7502f1833bf33d6cc5d3d132
-
SSDEEP
12288:MMrjy90HGR2AZK9N7peW6vH7GzeynPo9K4ejwiMPja99L6P:nyrA9udvbGxP1BjPcjaf6P
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-