General
-
Target
7bf2f48d58010eedd8df3a6b5.exe
-
Size
518KB
-
Sample
230708-tnydtaga9w
-
MD5
e80962cda1467356c56448a7bc37d852
-
SHA1
d5f5f48efce0b7e94e557a0763efb95f36d84a89
-
SHA256
7bf2f48d58010eedd8df3a6b54b3dc816cbec1eca4d7e97d0930d050cf928cb6
-
SHA512
a931d90e5fa3fe424fc222c8443b01e7dbabc32fc1531b2c2716b2ea04703596c99b236332247fdd148e7084ae307d0024c8063dedef86c3c7e413eddd6e06bc
-
SSDEEP
12288:AX+0fvzaRdnQgBmljqGqKOrfvrf8wmXrN:AX+evz82gBMjquEf7u
Static task
static1
Behavioral task
behavioral1
Sample
7bf2f48d58010eedd8df3a6b5.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
7bf2f48d58010eedd8df3a6b5.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
furod
77.91.68.70:19073
-
auth_value
d2386245fe11799b28b4521492a5879d
Targets
-
-
Target
7bf2f48d58010eedd8df3a6b5.exe
-
Size
518KB
-
MD5
e80962cda1467356c56448a7bc37d852
-
SHA1
d5f5f48efce0b7e94e557a0763efb95f36d84a89
-
SHA256
7bf2f48d58010eedd8df3a6b54b3dc816cbec1eca4d7e97d0930d050cf928cb6
-
SHA512
a931d90e5fa3fe424fc222c8443b01e7dbabc32fc1531b2c2716b2ea04703596c99b236332247fdd148e7084ae307d0024c8063dedef86c3c7e413eddd6e06bc
-
SSDEEP
12288:AX+0fvzaRdnQgBmljqGqKOrfvrf8wmXrN:AX+evz82gBMjquEf7u
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-