General
-
Target
65d18df23c60d9f0d917880da59d3ddb81483462d1253283c8c526874c8839d9.exe
-
Size
582KB
-
Sample
230808-qf3f1sec6z
-
MD5
2b77bacb2ac69963039eb41199eee479
-
SHA1
5af531f1fd5f1da98d881a63b478bb274287f381
-
SHA256
65d18df23c60d9f0d917880da59d3ddb81483462d1253283c8c526874c8839d9
-
SHA512
26d4146ca3355b18448493df40528ca83c8f26cf96d4801629c451635771a1113612e60edb3cac4c290173dd20705a01156dc0d969a76a17fdb50764e891cc39
-
SSDEEP
12288:tLDfczWW/AgKv/wrpnGk6lfSPMn2nOwZDfPFb/Xj:tffiKSMXlq0wtBDXj
Static task
static1
Behavioral task
behavioral1
Sample
65d18df23c60d9f0d917880da59d3ddb81483462d1253283c8c526874c8839d9.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
65d18df23c60d9f0d917880da59d3ddb81483462d1253283c8c526874c8839d9.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
gena
185.161.248.73:4164
-
auth_value
d05bf43eef533e262271449829751d07
Targets
-
-
Target
65d18df23c60d9f0d917880da59d3ddb81483462d1253283c8c526874c8839d9.exe
-
Size
582KB
-
MD5
2b77bacb2ac69963039eb41199eee479
-
SHA1
5af531f1fd5f1da98d881a63b478bb274287f381
-
SHA256
65d18df23c60d9f0d917880da59d3ddb81483462d1253283c8c526874c8839d9
-
SHA512
26d4146ca3355b18448493df40528ca83c8f26cf96d4801629c451635771a1113612e60edb3cac4c290173dd20705a01156dc0d969a76a17fdb50764e891cc39
-
SSDEEP
12288:tLDfczWW/AgKv/wrpnGk6lfSPMn2nOwZDfPFb/Xj:tffiKSMXlq0wtBDXj
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-