General
-
Target
x4696713.exe
-
Size
319KB
-
Sample
230708-3rxfcsad88
-
MD5
3441e6317cd6e42af1c6cd1f260d991a
-
SHA1
2b5ca51394ccfd915f3407860a664ac78987ba1c
-
SHA256
91a9b37a13cb7f8ee0a566939b846009f6bd14a71c7b66d2c333348e86907f87
-
SHA512
b3c5be466b826f7e05fe1babb16092a53126cec4f84cd38eb73a69d9935b856216cf3dbcb00f84b5f8b042252220ae8812fb0dc3c0c31673f17b7680f33fca9a
-
SSDEEP
6144:Key+bnr+2p0yN90QEUP54pcOnBJneBbFLxarfFpcvXEJ:+Mryy90+GpbBJnu5xsfFOs
Static task
static1
Behavioral task
behavioral1
Sample
x4696713.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
x4696713.exe
Resource
win10-20230703-en
Malware Config
Extracted
redline
furod
77.91.68.70:19073
-
auth_value
d2386245fe11799b28b4521492a5879d
Targets
-
-
Target
x4696713.exe
-
Size
319KB
-
MD5
3441e6317cd6e42af1c6cd1f260d991a
-
SHA1
2b5ca51394ccfd915f3407860a664ac78987ba1c
-
SHA256
91a9b37a13cb7f8ee0a566939b846009f6bd14a71c7b66d2c333348e86907f87
-
SHA512
b3c5be466b826f7e05fe1babb16092a53126cec4f84cd38eb73a69d9935b856216cf3dbcb00f84b5f8b042252220ae8812fb0dc3c0c31673f17b7680f33fca9a
-
SSDEEP
6144:Key+bnr+2p0yN90QEUP54pcOnBJneBbFLxarfFpcvXEJ:+Mryy90+GpbBJnu5xsfFOs
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-