General
-
Target
7b82e3f00a895000b951c89e2ebaa89c8f14c498f3501bd6856e4259ffe2f432
-
Size
584KB
-
Sample
230605-zpk3rsbd3z
-
MD5
96682f9f6bbac50a6aea3a3213905970
-
SHA1
e26b8b2e6df5762d18a465b86da423bddabf2f29
-
SHA256
7b82e3f00a895000b951c89e2ebaa89c8f14c498f3501bd6856e4259ffe2f432
-
SHA512
79c5d015bf05b9cb90f4432a563768d45f87e32ad692f153f23f47c237ef9d2171c1e4330e557063ae8336a1d2fe17ea00b3a763f5ce7e50f506672d7a003e4d
-
SSDEEP
12288:lMrLy90VDhONL4OTCzz66TqZ7Rl/Din1wJVaVttDs19NKBQA7:SyihOyKCyKqlm1wJE3tZ
Static task
static1
Behavioral task
behavioral1
Sample
7b82e3f00a895000b951c89e2ebaa89c8f14c498f3501bd6856e4259ffe2f432.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
diza
83.97.73.126:19048
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
7b82e3f00a895000b951c89e2ebaa89c8f14c498f3501bd6856e4259ffe2f432
-
Size
584KB
-
MD5
96682f9f6bbac50a6aea3a3213905970
-
SHA1
e26b8b2e6df5762d18a465b86da423bddabf2f29
-
SHA256
7b82e3f00a895000b951c89e2ebaa89c8f14c498f3501bd6856e4259ffe2f432
-
SHA512
79c5d015bf05b9cb90f4432a563768d45f87e32ad692f153f23f47c237ef9d2171c1e4330e557063ae8336a1d2fe17ea00b3a763f5ce7e50f506672d7a003e4d
-
SSDEEP
12288:lMrLy90VDhONL4OTCzz66TqZ7Rl/Din1wJVaVttDs19NKBQA7:SyihOyKCyKqlm1wJE3tZ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-