General
-
Target
72b0829f02d6495c469e35469.exe
-
Size
518KB
-
Sample
230708-y7cnnsah2z
-
MD5
72b0829f02d6495c469e35469ca71bbe
-
SHA1
5da83853e4629f02f9436a3d91efd8d14178b0e7
-
SHA256
7d0b155b95248002441c6e45f30672503e4c985172832607c93a393e7122a7b5
-
SHA512
6a23805aa680cfc2cd8c18d9076b604e89c5c31f56d83a070cfd6c6d056b02ad9d2b1eedab31b0fe9940ff380006dab03130de8078869b21c99796b7ccb38c0c
-
SSDEEP
12288:AuknfvzaRdnQgdi84HFJ+nHQnWNgqRX2Y:Aukfvz82gdJ4HSnHK8gqJf
Static task
static1
Behavioral task
behavioral1
Sample
72b0829f02d6495c469e35469.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
72b0829f02d6495c469e35469.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
furod
77.91.68.70:19073
-
auth_value
d2386245fe11799b28b4521492a5879d
Targets
-
-
Target
72b0829f02d6495c469e35469.exe
-
Size
518KB
-
MD5
72b0829f02d6495c469e35469ca71bbe
-
SHA1
5da83853e4629f02f9436a3d91efd8d14178b0e7
-
SHA256
7d0b155b95248002441c6e45f30672503e4c985172832607c93a393e7122a7b5
-
SHA512
6a23805aa680cfc2cd8c18d9076b604e89c5c31f56d83a070cfd6c6d056b02ad9d2b1eedab31b0fe9940ff380006dab03130de8078869b21c99796b7ccb38c0c
-
SSDEEP
12288:AuknfvzaRdnQgdi84HFJ+nHQnWNgqRX2Y:Aukfvz82gdJ4HSnHK8gqJf
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-