General
-
Target
f5f135e460ad943615628e9c6e2a31920d1e806e60902d8ecf6946c5ea59b0d0
-
Size
956KB
-
Sample
230818-3qlmgagf9s
-
MD5
ad0b2a4193e2fbe5fbfab054d01b4fce
-
SHA1
52144b0d4e8c1111ab6ca2633e244c766392bbe8
-
SHA256
f5f135e460ad943615628e9c6e2a31920d1e806e60902d8ecf6946c5ea59b0d0
-
SHA512
31d0a90a476cc8b23ddf7398785385db4afdd76b03beab3ae9dedbd9f7969ccb4faf9a803337fd3b88645550e913fa24bbede866381da29465b0575c5ffd7d46
-
SSDEEP
24576:6yLE0/Qi90uRjllOpBGpGToec5017sC+iDmJ:BdR90utlCggTAa7Yp
Static task
static1
Behavioral task
behavioral1
Sample
f5f135e460ad943615628e9c6e2a31920d1e806e60902d8ecf6946c5ea59b0d0.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
dugin
77.91.124.73:19071
-
auth_value
7c3e46e091100fd26a6076996d374c28
Targets
-
-
Target
f5f135e460ad943615628e9c6e2a31920d1e806e60902d8ecf6946c5ea59b0d0
-
Size
956KB
-
MD5
ad0b2a4193e2fbe5fbfab054d01b4fce
-
SHA1
52144b0d4e8c1111ab6ca2633e244c766392bbe8
-
SHA256
f5f135e460ad943615628e9c6e2a31920d1e806e60902d8ecf6946c5ea59b0d0
-
SHA512
31d0a90a476cc8b23ddf7398785385db4afdd76b03beab3ae9dedbd9f7969ccb4faf9a803337fd3b88645550e913fa24bbede866381da29465b0575c5ffd7d46
-
SSDEEP
24576:6yLE0/Qi90uRjllOpBGpGToec5017sC+iDmJ:BdR90utlCggTAa7Yp
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-