General
-
Target
9a472b0c97378c4b88ed92ce10e71b2bba9dca1763a229d582692a82a20ae379
-
Size
728KB
-
Sample
230605-pydpyagf58
-
MD5
e62fef3a9c5d0c2dfad1bdb1e91dcb9e
-
SHA1
71d84ebb595d60690b501ddd13c919bf8f8f0d68
-
SHA256
9a472b0c97378c4b88ed92ce10e71b2bba9dca1763a229d582692a82a20ae379
-
SHA512
2455470cd945e9e2a61b83b9c1127e263fafe4cb2d0ab1b2281288cb3a65265989b795d613cb6e64566a3034ca3ff556a61f344d7873eae70ec6dd37b221bb76
-
SSDEEP
12288:DMrHy90OjaIyVN/0pHP5kizHKAUNdd/SztvaVVesPHaHLEJFRYLh/e2RyN:4yXaIy3M15tzHVAPHSEJF0deUyN
Static task
static1
Behavioral task
behavioral1
Sample
9a472b0c97378c4b88ed92ce10e71b2bba9dca1763a229d582692a82a20ae379.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19046
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
9a472b0c97378c4b88ed92ce10e71b2bba9dca1763a229d582692a82a20ae379
-
Size
728KB
-
MD5
e62fef3a9c5d0c2dfad1bdb1e91dcb9e
-
SHA1
71d84ebb595d60690b501ddd13c919bf8f8f0d68
-
SHA256
9a472b0c97378c4b88ed92ce10e71b2bba9dca1763a229d582692a82a20ae379
-
SHA512
2455470cd945e9e2a61b83b9c1127e263fafe4cb2d0ab1b2281288cb3a65265989b795d613cb6e64566a3034ca3ff556a61f344d7873eae70ec6dd37b221bb76
-
SSDEEP
12288:DMrHy90OjaIyVN/0pHP5kizHKAUNdd/SztvaVVesPHaHLEJFRYLh/e2RyN:4yXaIy3M15tzHVAPHSEJF0deUyN
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-