General
-
Target
f7aad09f2f71e1c21101948e42f96b44093534e25de41407f0dd7661d9c2453d
-
Size
262KB
-
Sample
230607-qs6n7sbb29
-
MD5
7b664cc4562485c91caf4cafede4f4fe
-
SHA1
61c85620a562e3e2e9f261ba430eb68bef75dd6c
-
SHA256
f7aad09f2f71e1c21101948e42f96b44093534e25de41407f0dd7661d9c2453d
-
SHA512
a7c4c3526394dee860c57cc5764715379e5c6e7b7c2c9886673c32df1033f190f0f2a0ec9c1e898567ae6dd7a55ad99f64ec2c03ba154710fa43edd7febb07b5
-
SSDEEP
3072:Ox/qx1OuyRyXFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2SUHcj/:a/qx1aEFaQ7W05AEezbMPZFzAy2Sc
Static task
static1
Behavioral task
behavioral1
Sample
f7aad09f2f71e1c21101948e42f96b44093534e25de41407f0dd7661d9c2453d.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
sheron
83.97.73.129:19068
-
auth_value
2d067e7e2372227d3a03b335260112e9
Targets
-
-
Target
f7aad09f2f71e1c21101948e42f96b44093534e25de41407f0dd7661d9c2453d
-
Size
262KB
-
MD5
7b664cc4562485c91caf4cafede4f4fe
-
SHA1
61c85620a562e3e2e9f261ba430eb68bef75dd6c
-
SHA256
f7aad09f2f71e1c21101948e42f96b44093534e25de41407f0dd7661d9c2453d
-
SHA512
a7c4c3526394dee860c57cc5764715379e5c6e7b7c2c9886673c32df1033f190f0f2a0ec9c1e898567ae6dd7a55ad99f64ec2c03ba154710fa43edd7febb07b5
-
SSDEEP
3072:Ox/qx1OuyRyXFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2SUHcj/:a/qx1aEFaQ7W05AEezbMPZFzAy2Sc
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext
-