General
-
Target
cb8c4bf18d4c54e7126a690c48fc2e188b95acbfcec65ee4f04b3d9b90d2a918
-
Size
580KB
-
Sample
230605-kl7d9sfe85
-
MD5
ff7005f01c4c4d4ca928dbe3e94030f1
-
SHA1
51c1b6fc91b9e3d0050cd07f6ed2ee8821ed6c66
-
SHA256
cb8c4bf18d4c54e7126a690c48fc2e188b95acbfcec65ee4f04b3d9b90d2a918
-
SHA512
436a4bb0152a2d4731c9b18c482049aa68739a92807b7670b77a5ebec912f0955c007a22afbb75542c595506d8a8f37b230ecd2eab927798bfbfaf8400769692
-
SSDEEP
12288:SMrRy90rICG6cY6eFKU0a7Pg6JZI0M0nQsE6Pm13l5vEHYCVUgVE:ryicY0U0srW0M0Qt7C4CSgm
Static task
static1
Behavioral task
behavioral1
Sample
cb8c4bf18d4c54e7126a690c48fc2e188b95acbfcec65ee4f04b3d9b90d2a918.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
cb8c4bf18d4c54e7126a690c48fc2e188b95acbfcec65ee4f04b3d9b90d2a918
-
Size
580KB
-
MD5
ff7005f01c4c4d4ca928dbe3e94030f1
-
SHA1
51c1b6fc91b9e3d0050cd07f6ed2ee8821ed6c66
-
SHA256
cb8c4bf18d4c54e7126a690c48fc2e188b95acbfcec65ee4f04b3d9b90d2a918
-
SHA512
436a4bb0152a2d4731c9b18c482049aa68739a92807b7670b77a5ebec912f0955c007a22afbb75542c595506d8a8f37b230ecd2eab927798bfbfaf8400769692
-
SSDEEP
12288:SMrRy90rICG6cY6eFKU0a7Pg6JZI0M0nQsE6Pm13l5vEHYCVUgVE:ryicY0U0srW0M0Qt7C4CSgm
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-