General
-
Target
513733282cc0db1260fb7805be50d8fbbea6e8716941a5aaa1ee306f3aee17df
-
Size
855KB
-
Sample
230817-ppwjdshc75
-
MD5
ea1e2bbfce510b2117297aef143838cf
-
SHA1
ae367074cd5530ab9e874a9946c99d48ef7b48bc
-
SHA256
513733282cc0db1260fb7805be50d8fbbea6e8716941a5aaa1ee306f3aee17df
-
SHA512
0c941e2c99a160e6cd8c150625ba6bdda961e8464435e289f07c2a47e307337e5cb952cc4ecc66e8ce1f2395c848a7160317f0d160258ba11d25ce56522bb207
-
SSDEEP
24576:cyDAVAU6wg3uOO7Fl4RK3rBL4apTz5+ry:LaA+dOg7VBLfzEr
Static task
static1
Behavioral task
behavioral1
Sample
513733282cc0db1260fb7805be50d8fbbea6e8716941a5aaa1ee306f3aee17df.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
maga
77.91.124.54:19071
-
auth_value
9dd7a0be219be9b6228dc9b4e112b812
Targets
-
-
Target
513733282cc0db1260fb7805be50d8fbbea6e8716941a5aaa1ee306f3aee17df
-
Size
855KB
-
MD5
ea1e2bbfce510b2117297aef143838cf
-
SHA1
ae367074cd5530ab9e874a9946c99d48ef7b48bc
-
SHA256
513733282cc0db1260fb7805be50d8fbbea6e8716941a5aaa1ee306f3aee17df
-
SHA512
0c941e2c99a160e6cd8c150625ba6bdda961e8464435e289f07c2a47e307337e5cb952cc4ecc66e8ce1f2395c848a7160317f0d160258ba11d25ce56522bb207
-
SSDEEP
24576:cyDAVAU6wg3uOO7Fl4RK3rBL4apTz5+ry:LaA+dOg7VBLfzEr
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-