General
-
Target
cc5d68db13e0e43c332a24881262e8fa294b677a8ed592c53b12faac9d26452a
-
Size
957KB
-
Sample
230818-218pbagd9t
-
MD5
8a831b47aebdcec7a0569d77b8512c37
-
SHA1
dde7b9357026a9feb08f951e86eb8a328ca5a816
-
SHA256
cc5d68db13e0e43c332a24881262e8fa294b677a8ed592c53b12faac9d26452a
-
SHA512
9ef04cafe2a5ada6509ffde3736eb9896b95accc1a748c0affeeeb837609d1c4cac1cea000c03b36a4697fdbf91ad22e2c67400ce3ef117df9df59bff83a1d61
-
SSDEEP
24576:HyFXdZMrgZgeUV0vX2iZNkqF3OyQY7Z3SBbJ:ShrJUV0vDFFeSVsb
Static task
static1
Behavioral task
behavioral1
Sample
cc5d68db13e0e43c332a24881262e8fa294b677a8ed592c53b12faac9d26452a.exe
Resource
win10-20230703-en
Malware Config
Extracted
redline
dugin
77.91.124.73:19071
-
auth_value
7c3e46e091100fd26a6076996d374c28
Targets
-
-
Target
cc5d68db13e0e43c332a24881262e8fa294b677a8ed592c53b12faac9d26452a
-
Size
957KB
-
MD5
8a831b47aebdcec7a0569d77b8512c37
-
SHA1
dde7b9357026a9feb08f951e86eb8a328ca5a816
-
SHA256
cc5d68db13e0e43c332a24881262e8fa294b677a8ed592c53b12faac9d26452a
-
SHA512
9ef04cafe2a5ada6509ffde3736eb9896b95accc1a748c0affeeeb837609d1c4cac1cea000c03b36a4697fdbf91ad22e2c67400ce3ef117df9df59bff83a1d61
-
SSDEEP
24576:HyFXdZMrgZgeUV0vX2iZNkqF3OyQY7Z3SBbJ:ShrJUV0vDFFeSVsb
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-