General
-
Target
19534ffe077845759ef45aaeff4dd76ed9b436962740d0c94369ef8ce3ef378b
-
Size
282KB
-
Sample
230608-awkm5sac8s
-
MD5
3dfe0faff94a927433e02ae604b93f88
-
SHA1
0a6e25bcef4e9f50ff3675de24833e9fd3c278f7
-
SHA256
19534ffe077845759ef45aaeff4dd76ed9b436962740d0c94369ef8ce3ef378b
-
SHA512
94092bb226f6904d1c3c96330aa757d1e1e315ff98d8d65fd05045726f2f4d8150a0a6809768c54c4035c17177b050a946a97984cb295c94ce4b0f532f4dcad8
-
SSDEEP
6144:pQvoWvJTag5GwvTygXUNVS4MGh1aBFrvz1xcxcWhdrt:pUznyR1aBFrvz1xcxddrt
Static task
static1
Behavioral task
behavioral1
Sample
19534ffe077845759ef45aaeff4dd76ed9b436962740d0c94369ef8ce3ef378b.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
sheron
83.97.73.129:19068
-
auth_value
2d067e7e2372227d3a03b335260112e9
Targets
-
-
Target
19534ffe077845759ef45aaeff4dd76ed9b436962740d0c94369ef8ce3ef378b
-
Size
282KB
-
MD5
3dfe0faff94a927433e02ae604b93f88
-
SHA1
0a6e25bcef4e9f50ff3675de24833e9fd3c278f7
-
SHA256
19534ffe077845759ef45aaeff4dd76ed9b436962740d0c94369ef8ce3ef378b
-
SHA512
94092bb226f6904d1c3c96330aa757d1e1e315ff98d8d65fd05045726f2f4d8150a0a6809768c54c4035c17177b050a946a97984cb295c94ce4b0f532f4dcad8
-
SSDEEP
6144:pQvoWvJTag5GwvTygXUNVS4MGh1aBFrvz1xcxcWhdrt:pUznyR1aBFrvz1xcxddrt
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-