General
-
Target
f9460380exeexeexeexeexeex.exe
-
Size
265KB
-
Sample
230711-txdqrshg57
-
MD5
ccb1fb5983d0d1092953531c7fc98bef
-
SHA1
d33fc1d5fb54441e0caafa9d0583016e6f213c7a
-
SHA256
40175fe8884f1e7565c71eb2a0f09e58c7ff082d8865f83f17f46fc4693b04bc
-
SHA512
715971cfba3b6e3c9951dfc5d6e08c485ceec6a2da924bc8b95eafa1fc2f52cf31ddd69f8ef014273b1bbaa9008c8e21e7fc6049f1be1dd153f726c7b6644b91
-
SSDEEP
6144:8OlVrmzXcaFV4uYzXTVfR5HE+aX+iexf2EtQuk2K6mVnMg0UTDa:8OXmoaFGuYzXTiXGxf2EtQuk2K6mVnM8
Static task
static1
Behavioral task
behavioral1
Sample
f9460380exeexeexeexeexeex.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
f9460380exeexeexeexeexeex.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
furod
77.91.68.70:19073
-
auth_value
d2386245fe11799b28b4521492a5879d
Targets
-
-
Target
f9460380exeexeexeexeexeex.exe
-
Size
265KB
-
MD5
ccb1fb5983d0d1092953531c7fc98bef
-
SHA1
d33fc1d5fb54441e0caafa9d0583016e6f213c7a
-
SHA256
40175fe8884f1e7565c71eb2a0f09e58c7ff082d8865f83f17f46fc4693b04bc
-
SHA512
715971cfba3b6e3c9951dfc5d6e08c485ceec6a2da924bc8b95eafa1fc2f52cf31ddd69f8ef014273b1bbaa9008c8e21e7fc6049f1be1dd153f726c7b6644b91
-
SSDEEP
6144:8OlVrmzXcaFV4uYzXTVfR5HE+aX+iexf2EtQuk2K6mVnMg0UTDa:8OXmoaFGuYzXTiXGxf2EtQuk2K6mVnM8
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Drops file in System32 directory
-