General
-
Target
6f8b5553336c757b12d4cf49ad22459b52af5dd181fb51a073dad32a905e335d
-
Size
580KB
-
Sample
230605-j36cvsga4v
-
MD5
062ea44a244d188028b828ec4ed3ba40
-
SHA1
c55aa6c4979defc338bf3c4292cc34c6f096d8eb
-
SHA256
6f8b5553336c757b12d4cf49ad22459b52af5dd181fb51a073dad32a905e335d
-
SHA512
2a9bc80aae3f174a3bbe492d7c7e21fc60307791a632752e418818720ac93e175c7d49315047aee29a6aa9aec52bd7cd4aac9355b3c73b1355a3ac15b53c5d87
-
SSDEEP
12288:AMrNy903qOK7fImpawH4rkSPf/PZ6rgpQq5XT+pppIN7qZD:9y1bfIiH4lIrg5lTwIEZD
Static task
static1
Behavioral task
behavioral1
Sample
6f8b5553336c757b12d4cf49ad22459b52af5dd181fb51a073dad32a905e335d.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
6f8b5553336c757b12d4cf49ad22459b52af5dd181fb51a073dad32a905e335d
-
Size
580KB
-
MD5
062ea44a244d188028b828ec4ed3ba40
-
SHA1
c55aa6c4979defc338bf3c4292cc34c6f096d8eb
-
SHA256
6f8b5553336c757b12d4cf49ad22459b52af5dd181fb51a073dad32a905e335d
-
SHA512
2a9bc80aae3f174a3bbe492d7c7e21fc60307791a632752e418818720ac93e175c7d49315047aee29a6aa9aec52bd7cd4aac9355b3c73b1355a3ac15b53c5d87
-
SSDEEP
12288:AMrNy903qOK7fImpawH4rkSPf/PZ6rgpQq5XT+pppIN7qZD:9y1bfIiH4lIrg5lTwIEZD
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-