General
-
Target
d8e93551bc64022d36892f187c094bb7c72fdfd474efd59d671abb2ebe9e6331
-
Size
576KB
-
Sample
230615-168e3abd7w
-
MD5
1a4b23f904b79a5e52856ef40844e34a
-
SHA1
05eaa04207138cfce00b9037a0bf4a9ee14340f5
-
SHA256
d8e93551bc64022d36892f187c094bb7c72fdfd474efd59d671abb2ebe9e6331
-
SHA512
536d18a8c4782c50317d7536dde8e28cb3e6f4ba440f22d10bd8d19c5f1be3eab2163cbe6cb5a9c7023d91d20a65cefc0ee941bc26c49fabeb62760f4fa6ae94
-
SSDEEP
12288:HMr+y907eEl/OQ/HOxEhw7J/OLoYBIi8rEhUDRqgXIef:NyCZHhw74LRBIdA6
Static task
static1
Behavioral task
behavioral1
Sample
d8e93551bc64022d36892f187c094bb7c72fdfd474efd59d671abb2ebe9e6331.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
dana
83.97.73.130:19061
-
auth_value
da2d1691db653e49676d799e1eae2673
Targets
-
-
Target
d8e93551bc64022d36892f187c094bb7c72fdfd474efd59d671abb2ebe9e6331
-
Size
576KB
-
MD5
1a4b23f904b79a5e52856ef40844e34a
-
SHA1
05eaa04207138cfce00b9037a0bf4a9ee14340f5
-
SHA256
d8e93551bc64022d36892f187c094bb7c72fdfd474efd59d671abb2ebe9e6331
-
SHA512
536d18a8c4782c50317d7536dde8e28cb3e6f4ba440f22d10bd8d19c5f1be3eab2163cbe6cb5a9c7023d91d20a65cefc0ee941bc26c49fabeb62760f4fa6ae94
-
SSDEEP
12288:HMr+y907eEl/OQ/HOxEhw7J/OLoYBIi8rEhUDRqgXIef:NyCZHhw74LRBIdA6
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-