General
-
Target
35e838568f3e8695f6082980816849de4b92184eaec2a20e044c0614e3a69711
-
Size
584KB
-
Sample
230606-ge4g9acg3w
-
MD5
1ede79f572db0a1c1a52dc8b02bfb61c
-
SHA1
92d9f535504ab2f52ebe7936eafd432f057744a6
-
SHA256
35e838568f3e8695f6082980816849de4b92184eaec2a20e044c0614e3a69711
-
SHA512
7cf4e7347418d9215c63aad2a57fb93a4f563a12b0f1b0634c8942215b3bc95388a0ac93a83a10fedc23af7e6af60f4875b4a14cefce533715924ebefddac577
-
SSDEEP
12288:sMr6y90TbmO1ZDCSkxkVPZN0iMi/vxopr0EPTh2YoGVGPD1iW:Oy258M00BCr/oYoU8d
Static task
static1
Behavioral task
behavioral1
Sample
35e838568f3e8695f6082980816849de4b92184eaec2a20e044c0614e3a69711.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
diza
83.97.73.126:19048
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
35e838568f3e8695f6082980816849de4b92184eaec2a20e044c0614e3a69711
-
Size
584KB
-
MD5
1ede79f572db0a1c1a52dc8b02bfb61c
-
SHA1
92d9f535504ab2f52ebe7936eafd432f057744a6
-
SHA256
35e838568f3e8695f6082980816849de4b92184eaec2a20e044c0614e3a69711
-
SHA512
7cf4e7347418d9215c63aad2a57fb93a4f563a12b0f1b0634c8942215b3bc95388a0ac93a83a10fedc23af7e6af60f4875b4a14cefce533715924ebefddac577
-
SSDEEP
12288:sMr6y90TbmO1ZDCSkxkVPZN0iMi/vxopr0EPTh2YoGVGPD1iW:Oy258M00BCr/oYoU8d
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-