General
-
Target
167958214a4176abc040094d03625afef5becf58f3f847905ab9fc225e94cb41
-
Size
579KB
-
Sample
230605-h2q14sfc86
-
MD5
057d3c81e496ba17ea206b7ce0ad3328
-
SHA1
b7006db46cb203d37042b0f164b9e69ca37659a8
-
SHA256
167958214a4176abc040094d03625afef5becf58f3f847905ab9fc225e94cb41
-
SHA512
bc1dfc056f0e30f0257249a30614323f558e0e60120b42a7642849f608f11187ad1bd4ecb3463620671317720b0a9a22fc4e76e5adf983a44ba83c8270284866
-
SSDEEP
12288:/MrWy90BHdOOGD9vwjC7DfNzhQOYfx6f0b7z5vW1TSpCS:Fy2dtStNOj6f0/z5e1KB
Static task
static1
Behavioral task
behavioral1
Sample
167958214a4176abc040094d03625afef5becf58f3f847905ab9fc225e94cb41.exe
Resource
win10-20230220-en
Malware Config
Extracted
redline
diza
83.97.73.126:19046
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
167958214a4176abc040094d03625afef5becf58f3f847905ab9fc225e94cb41
-
Size
579KB
-
MD5
057d3c81e496ba17ea206b7ce0ad3328
-
SHA1
b7006db46cb203d37042b0f164b9e69ca37659a8
-
SHA256
167958214a4176abc040094d03625afef5becf58f3f847905ab9fc225e94cb41
-
SHA512
bc1dfc056f0e30f0257249a30614323f558e0e60120b42a7642849f608f11187ad1bd4ecb3463620671317720b0a9a22fc4e76e5adf983a44ba83c8270284866
-
SSDEEP
12288:/MrWy90BHdOOGD9vwjC7DfNzhQOYfx6f0b7z5vW1TSpCS:Fy2dtStNOj6f0/z5e1KB
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-