General
-
Target
9527c5ca5596b22722c968413898af54aa99836866ba1633eca5c435e658f2e2
-
Size
282KB
-
Sample
230608-gc6vladb9w
-
MD5
36c8895442519b919b04d05d196c73f4
-
SHA1
859f61c12f335e253f858a79ebd8a1d29e8c6404
-
SHA256
9527c5ca5596b22722c968413898af54aa99836866ba1633eca5c435e658f2e2
-
SHA512
f5aae082c8bc49a270bbf3903fe897485757ec5ad3a58a54efd88358c7d1a04ea4a5adb90b39c62f15f0c59ff0150b1783f76739bd216a7770c0e9f2ec65cd75
-
SSDEEP
6144:6QvoWvJEGHKwvTygXUNVS4MGh1aBFrvz1xcxcWhjrt:6U5hyR1aBFrvz1xcxdjrt
Static task
static1
Behavioral task
behavioral1
Sample
9527c5ca5596b22722c968413898af54aa99836866ba1633eca5c435e658f2e2.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
sheron
83.97.73.129:19068
-
auth_value
2d067e7e2372227d3a03b335260112e9
Targets
-
-
Target
9527c5ca5596b22722c968413898af54aa99836866ba1633eca5c435e658f2e2
-
Size
282KB
-
MD5
36c8895442519b919b04d05d196c73f4
-
SHA1
859f61c12f335e253f858a79ebd8a1d29e8c6404
-
SHA256
9527c5ca5596b22722c968413898af54aa99836866ba1633eca5c435e658f2e2
-
SHA512
f5aae082c8bc49a270bbf3903fe897485757ec5ad3a58a54efd88358c7d1a04ea4a5adb90b39c62f15f0c59ff0150b1783f76739bd216a7770c0e9f2ec65cd75
-
SSDEEP
6144:6QvoWvJEGHKwvTygXUNVS4MGh1aBFrvz1xcxcWhjrt:6U5hyR1aBFrvz1xcxdjrt
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext
-