General
-
Target
a5d61912dbd2a83e907946937998836a97321a6b772df1da9e4dd48d14453056
-
Size
580KB
-
Sample
230605-hkelrafc22
-
MD5
78985f5d07c69fe642bd48a513d2da88
-
SHA1
f6f79a7c1d5b0f569f9af1d42aa07b849c13ed74
-
SHA256
a5d61912dbd2a83e907946937998836a97321a6b772df1da9e4dd48d14453056
-
SHA512
7d5114601dc5cd4e3cbd910bbced3ea4cad9e8d8a0121b7bc3e9a4211d8b090759980ce3dea17c3ef7c7bc4dc4ffd5fcb1bc71a7277af4d806f1f244881fdd3a
-
SSDEEP
12288:dMrTy90BxU0FpXFBICNRXZmGqgvIu++yrL7nO8bAW:myc3ICNUrTnO8bAW
Static task
static1
Behavioral task
behavioral1
Sample
a5d61912dbd2a83e907946937998836a97321a6b772df1da9e4dd48d14453056.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
a5d61912dbd2a83e907946937998836a97321a6b772df1da9e4dd48d14453056
-
Size
580KB
-
MD5
78985f5d07c69fe642bd48a513d2da88
-
SHA1
f6f79a7c1d5b0f569f9af1d42aa07b849c13ed74
-
SHA256
a5d61912dbd2a83e907946937998836a97321a6b772df1da9e4dd48d14453056
-
SHA512
7d5114601dc5cd4e3cbd910bbced3ea4cad9e8d8a0121b7bc3e9a4211d8b090759980ce3dea17c3ef7c7bc4dc4ffd5fcb1bc71a7277af4d806f1f244881fdd3a
-
SSDEEP
12288:dMrTy90BxU0FpXFBICNRXZmGqgvIu++yrL7nO8bAW:myc3ICNUrTnO8bAW
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-