General
-
Target
dd74fc070214b6f1667286415ceca29f7bf867bae4414be55ba0a22cccb38558
-
Size
714KB
-
Sample
230818-yk7wasdc92
-
MD5
0e14a8a891137c58d81a87a840b402db
-
SHA1
7faec023698dfcc71eeb83b90bec3f56fd68e54e
-
SHA256
dd74fc070214b6f1667286415ceca29f7bf867bae4414be55ba0a22cccb38558
-
SHA512
8221ffdb1c6de10625aa55a2b72d5bfd20fa6cc57e3edd7654040059ad28f7f3df42b7f98d0bcdd020e30ca0f4f63d9111ff1b241dab83ee7af857ef46e81afc
-
SSDEEP
12288:fMrpy90+sBjvwSS2gBENcZ5Vb9M1de8nwxP2XFxvkQtYs4embt:Wy8J4SSHlZ5p6bnQP2j4s4eit
Static task
static1
Behavioral task
behavioral1
Sample
dd74fc070214b6f1667286415ceca29f7bf867bae4414be55ba0a22cccb38558.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
dugin
77.91.124.73:19071
-
auth_value
7c3e46e091100fd26a6076996d374c28
Targets
-
-
Target
dd74fc070214b6f1667286415ceca29f7bf867bae4414be55ba0a22cccb38558
-
Size
714KB
-
MD5
0e14a8a891137c58d81a87a840b402db
-
SHA1
7faec023698dfcc71eeb83b90bec3f56fd68e54e
-
SHA256
dd74fc070214b6f1667286415ceca29f7bf867bae4414be55ba0a22cccb38558
-
SHA512
8221ffdb1c6de10625aa55a2b72d5bfd20fa6cc57e3edd7654040059ad28f7f3df42b7f98d0bcdd020e30ca0f4f63d9111ff1b241dab83ee7af857ef46e81afc
-
SSDEEP
12288:fMrpy90+sBjvwSS2gBENcZ5Vb9M1de8nwxP2XFxvkQtYs4embt:Wy8J4SSHlZ5p6bnQP2j4s4eit
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-