General
-
Target
42fc4dc8b4a173133c9428321.exe
-
Size
513KB
-
Sample
230709-m5vkxsdc5t
-
MD5
280ed5461b5376e7acd971ebba4bbe24
-
SHA1
8bb614ffb41b8aed64f91c15fdbdcb9885f05c76
-
SHA256
42fc4dc8b4a173133c9428321bb31b91ef41d2746d1662bccfc7a3185646516e
-
SHA512
30566219a2c46fae40c65c174f99fa4bb803cb12615529534e82770c456d4d46d636f2d1fc2cb804b1435b44f2ba9ba181394627633853900b718efc6e389477
-
SSDEEP
12288:ZFiBV94I6WQBS/h3JZEjqpZu3otQYPJlnnTpAwjzloLFeDSjA:49p/h5ZEqO3LwlnywjBoL4uj
Static task
static1
Behavioral task
behavioral1
Sample
42fc4dc8b4a173133c9428321.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
42fc4dc8b4a173133c9428321.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
furod
77.91.68.70:19073
-
auth_value
d2386245fe11799b28b4521492a5879d
Targets
-
-
Target
42fc4dc8b4a173133c9428321.exe
-
Size
513KB
-
MD5
280ed5461b5376e7acd971ebba4bbe24
-
SHA1
8bb614ffb41b8aed64f91c15fdbdcb9885f05c76
-
SHA256
42fc4dc8b4a173133c9428321bb31b91ef41d2746d1662bccfc7a3185646516e
-
SHA512
30566219a2c46fae40c65c174f99fa4bb803cb12615529534e82770c456d4d46d636f2d1fc2cb804b1435b44f2ba9ba181394627633853900b718efc6e389477
-
SSDEEP
12288:ZFiBV94I6WQBS/h3JZEjqpZu3otQYPJlnnTpAwjzloLFeDSjA:49p/h5ZEqO3LwlnywjBoL4uj
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-