General
-
Target
87c6033e3f1ccc35e5f5b1cb0.exe
-
Size
513KB
-
Sample
230710-qlgfqsaf46
-
MD5
87c6033e3f1ccc35e5f5b1cb0aa185d1
-
SHA1
cf9c12c43a051b5506afa1101b7f0f9db76f2371
-
SHA256
866b1295e195c481a7eb09fcd0f50c8f949a2b85c5762120949ec8cc407fd730
-
SHA512
ad0bfefcd38986482136eda1047e0f617d17d6311b6c4cde603ae58ead69095958d7358aa560bd9c6e77fb074f7b804353402ffec1823e797116da412ca8a439
-
SSDEEP
6144:Qk7/YCV8HBZ5CWGYLUz247b4p2RYm3lnsguZy6V7DuyhtWR7zR/7Q9X:QkUPFz47l1ZuVOacx
Static task
static1
Behavioral task
behavioral1
Sample
87c6033e3f1ccc35e5f5b1cb0.exe
Resource
win7-20230705-en
Behavioral task
behavioral2
Sample
87c6033e3f1ccc35e5f5b1cb0.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
kira
77.91.68.48:19071
-
auth_value
1677a40fd8997eb89377e1681911e9c6
Targets
-
-
Target
87c6033e3f1ccc35e5f5b1cb0.exe
-
Size
513KB
-
MD5
87c6033e3f1ccc35e5f5b1cb0aa185d1
-
SHA1
cf9c12c43a051b5506afa1101b7f0f9db76f2371
-
SHA256
866b1295e195c481a7eb09fcd0f50c8f949a2b85c5762120949ec8cc407fd730
-
SHA512
ad0bfefcd38986482136eda1047e0f617d17d6311b6c4cde603ae58ead69095958d7358aa560bd9c6e77fb074f7b804353402ffec1823e797116da412ca8a439
-
SSDEEP
6144:Qk7/YCV8HBZ5CWGYLUz247b4p2RYm3lnsguZy6V7DuyhtWR7zR/7Q9X:QkUPFz47l1ZuVOacx
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-