General
-
Target
834670d4c3f106c1f3aa216898bb2f94b5ef14a7515afdfa9c855dd7375e12fc
-
Size
855KB
-
Sample
230817-p47j7sba8v
-
MD5
7950cfe4c09265f6e0f7abc2c27efbbf
-
SHA1
bc37c9c7ae7b902ec345eeb8f58b7284248440bb
-
SHA256
834670d4c3f106c1f3aa216898bb2f94b5ef14a7515afdfa9c855dd7375e12fc
-
SHA512
f265f93d24f719f3552ac58433c107e6866c9bcc61e1b50fd8fe75956bd6fdd401e6761b4af48605fdc3c2219cc7ab640ecbe0c740f87eec330a6d2b3a6bac94
-
SSDEEP
12288:3Mrwy90Rvx8LBX1/T9i2Z/hfvtDj4k7XApvlMjfiLAeDp1bfvRTxqTzL5u+4GM:vySe1lZvj4mApvOxWphxto3yGM
Static task
static1
Behavioral task
behavioral1
Sample
834670d4c3f106c1f3aa216898bb2f94b5ef14a7515afdfa9c855dd7375e12fc.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
maga
77.91.124.54:19071
-
auth_value
9dd7a0be219be9b6228dc9b4e112b812
Targets
-
-
Target
834670d4c3f106c1f3aa216898bb2f94b5ef14a7515afdfa9c855dd7375e12fc
-
Size
855KB
-
MD5
7950cfe4c09265f6e0f7abc2c27efbbf
-
SHA1
bc37c9c7ae7b902ec345eeb8f58b7284248440bb
-
SHA256
834670d4c3f106c1f3aa216898bb2f94b5ef14a7515afdfa9c855dd7375e12fc
-
SHA512
f265f93d24f719f3552ac58433c107e6866c9bcc61e1b50fd8fe75956bd6fdd401e6761b4af48605fdc3c2219cc7ab640ecbe0c740f87eec330a6d2b3a6bac94
-
SSDEEP
12288:3Mrwy90Rvx8LBX1/T9i2Z/hfvtDj4k7XApvlMjfiLAeDp1bfvRTxqTzL5u+4GM:vySe1lZvj4mApvOxWphxto3yGM
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-