General
-
Target
a182eaf8492bd08733490d4789d6880e10b70540fa4120fb313cbe43fc0a6fb1
-
Size
580KB
-
Sample
230605-gndm7afa82
-
MD5
946ff1199ac6e88b6ed08ad159c0281a
-
SHA1
27ac44d31dbfa78b03dbbb51bb4010e1a98af338
-
SHA256
a182eaf8492bd08733490d4789d6880e10b70540fa4120fb313cbe43fc0a6fb1
-
SHA512
8ef7f960fa37e2d79519b2b5aee757b2414e990ca3177957bf53d7ee628e5198b101872ce2bfb720aa5c7fef408df97c391e11d1fd263ef19e0ec7753454796e
-
SSDEEP
12288:fMrmy90f6ExkluLqmfL1wjcsPjgo0N1rC:Vyw/klCT1wjPgo0N1rC
Static task
static1
Behavioral task
behavioral1
Sample
a182eaf8492bd08733490d4789d6880e10b70540fa4120fb313cbe43fc0a6fb1.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
diza
83.97.73.126:19046
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
a182eaf8492bd08733490d4789d6880e10b70540fa4120fb313cbe43fc0a6fb1
-
Size
580KB
-
MD5
946ff1199ac6e88b6ed08ad159c0281a
-
SHA1
27ac44d31dbfa78b03dbbb51bb4010e1a98af338
-
SHA256
a182eaf8492bd08733490d4789d6880e10b70540fa4120fb313cbe43fc0a6fb1
-
SHA512
8ef7f960fa37e2d79519b2b5aee757b2414e990ca3177957bf53d7ee628e5198b101872ce2bfb720aa5c7fef408df97c391e11d1fd263ef19e0ec7753454796e
-
SSDEEP
12288:fMrmy90f6ExkluLqmfL1wjcsPjgo0N1rC:Vyw/klCT1wjPgo0N1rC
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-