General
-
Target
4df77cc14f57bdd1e0d927d56cc75f49.exe
-
Size
854KB
-
Sample
230818-v9flkaea5z
-
MD5
4df77cc14f57bdd1e0d927d56cc75f49
-
SHA1
9b20638e0c006ca5ad5726fd425de091723b2662
-
SHA256
e494faf13a3dc85b8afd8425956f63de5530a83c6e856a397b4c62808e96fd94
-
SHA512
0507a0e573906093a4ecbe61bbf6d7ed50c95bffac3024e6c8df893bfe54e2446ec591004e7992fb32b9436f0b5d9da853d63c24cb8962908adc51afc8590c78
-
SSDEEP
12288:bMrdy90PtHKIX53vFtifW0VsDTg6LwaC3nkwqVLYef43nXiddIgBanqdnAE8L7Lt:qyORVX1UW0VcMXbHiPnmqNAVLbQvN1k
Static task
static1
Behavioral task
behavioral1
Sample
4df77cc14f57bdd1e0d927d56cc75f49.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4df77cc14f57bdd1e0d927d56cc75f49.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
dugin
77.91.124.73:19071
-
auth_value
7c3e46e091100fd26a6076996d374c28
Targets
-
-
Target
4df77cc14f57bdd1e0d927d56cc75f49.exe
-
Size
854KB
-
MD5
4df77cc14f57bdd1e0d927d56cc75f49
-
SHA1
9b20638e0c006ca5ad5726fd425de091723b2662
-
SHA256
e494faf13a3dc85b8afd8425956f63de5530a83c6e856a397b4c62808e96fd94
-
SHA512
0507a0e573906093a4ecbe61bbf6d7ed50c95bffac3024e6c8df893bfe54e2446ec591004e7992fb32b9436f0b5d9da853d63c24cb8962908adc51afc8590c78
-
SSDEEP
12288:bMrdy90PtHKIX53vFtifW0VsDTg6LwaC3nkwqVLYef43nXiddIgBanqdnAE8L7Lt:qyORVX1UW0VcMXbHiPnmqNAVLbQvN1k
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-