General
-
Target
ddf7680c982672d245d94fe7e.exe
-
Size
517KB
-
Sample
230710-xfy7xseb4s
-
MD5
ddf7680c982672d245d94fe7e41939bc
-
SHA1
4d5b00bc1cafaa9e835c13433da394a19151dd45
-
SHA256
7035837660489e07809fa617cd439f6a88e84abe26bf4d47b35727b02aef6dd3
-
SHA512
188d8c6ef471e98d357887af129f9c99987b943cefee58fe791a5b878f6a1bc44e0c84ba7334422f9c8611c3bc0918258888e246d44580e00361da773040c2a2
-
SSDEEP
12288:W4qA0fvdaRdnQgOZVKI75NFhs6yhR3+4S7pvn9O:WVAevd82gOHKufFhs6yhR3+17pFO
Static task
static1
Behavioral task
behavioral1
Sample
ddf7680c982672d245d94fe7e.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
ddf7680c982672d245d94fe7e.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
furod
77.91.68.70:19073
-
auth_value
d2386245fe11799b28b4521492a5879d
Targets
-
-
Target
ddf7680c982672d245d94fe7e.exe
-
Size
517KB
-
MD5
ddf7680c982672d245d94fe7e41939bc
-
SHA1
4d5b00bc1cafaa9e835c13433da394a19151dd45
-
SHA256
7035837660489e07809fa617cd439f6a88e84abe26bf4d47b35727b02aef6dd3
-
SHA512
188d8c6ef471e98d357887af129f9c99987b943cefee58fe791a5b878f6a1bc44e0c84ba7334422f9c8611c3bc0918258888e246d44580e00361da773040c2a2
-
SSDEEP
12288:W4qA0fvdaRdnQgOZVKI75NFhs6yhR3+4S7pvn9O:WVAevd82gOHKufFhs6yhR3+17pFO
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-