General
-
Target
2fb6de4ff6816fe9db70ae103e31f39825c3e738180028431cc366d0d871d983
-
Size
580KB
-
Sample
230605-hpxm5afc52
-
MD5
74961b3d2ba94680dd0a8a9945ee46a4
-
SHA1
dab73096107320f74ca58566faffa5b35f3611b3
-
SHA256
2fb6de4ff6816fe9db70ae103e31f39825c3e738180028431cc366d0d871d983
-
SHA512
ec1122d3a25c143cc18ca945301a05630a98caf45e10c23fd28bfecc05c4d03c84592760d55a507bbe7317543f9c7ba0d99a896285d832b891a728a3f2df624b
-
SSDEEP
12288:KMrly90HrbY2eFUvPUkHgJHmGo/79NjcX1aIcX:nyi4liImGoZNYl+
Static task
static1
Behavioral task
behavioral1
Sample
2fb6de4ff6816fe9db70ae103e31f39825c3e738180028431cc366d0d871d983.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
2fb6de4ff6816fe9db70ae103e31f39825c3e738180028431cc366d0d871d983
-
Size
580KB
-
MD5
74961b3d2ba94680dd0a8a9945ee46a4
-
SHA1
dab73096107320f74ca58566faffa5b35f3611b3
-
SHA256
2fb6de4ff6816fe9db70ae103e31f39825c3e738180028431cc366d0d871d983
-
SHA512
ec1122d3a25c143cc18ca945301a05630a98caf45e10c23fd28bfecc05c4d03c84592760d55a507bbe7317543f9c7ba0d99a896285d832b891a728a3f2df624b
-
SSDEEP
12288:KMrly90HrbY2eFUvPUkHgJHmGo/79NjcX1aIcX:nyi4liImGoZNYl+
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-