General
-
Target
e83858d65699c0ab13d4d68805f25f1a522144fae28f3e80a871aa28fa0a6fef
-
Size
832KB
-
Sample
230819-cjw7hsff73
-
MD5
1319abe8f1903a5ea0ed17e86c59b9d0
-
SHA1
6c0a0cabcd3b6cdd4dd230d61a0cd937aa9dade4
-
SHA256
e83858d65699c0ab13d4d68805f25f1a522144fae28f3e80a871aa28fa0a6fef
-
SHA512
e0314fca39fd8c26121371d03aef099ab735270daf419a00c690eb441ddb1d167674b2b26bb79b93f6e25c63a33a607f6f5039226c93860c9df85902bb15dade
-
SSDEEP
12288:LMrCy90Q/jPK2xx2nA4K9Hf2yiO0tISPPR2ltglN1JraSZljAs:VyXrSu0nY/ty3j3X
Static task
static1
Behavioral task
behavioral1
Sample
e83858d65699c0ab13d4d68805f25f1a522144fae28f3e80a871aa28fa0a6fef.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
dugin
77.91.124.73:19071
-
auth_value
7c3e46e091100fd26a6076996d374c28
Targets
-
-
Target
e83858d65699c0ab13d4d68805f25f1a522144fae28f3e80a871aa28fa0a6fef
-
Size
832KB
-
MD5
1319abe8f1903a5ea0ed17e86c59b9d0
-
SHA1
6c0a0cabcd3b6cdd4dd230d61a0cd937aa9dade4
-
SHA256
e83858d65699c0ab13d4d68805f25f1a522144fae28f3e80a871aa28fa0a6fef
-
SHA512
e0314fca39fd8c26121371d03aef099ab735270daf419a00c690eb441ddb1d167674b2b26bb79b93f6e25c63a33a607f6f5039226c93860c9df85902bb15dade
-
SSDEEP
12288:LMrCy90Q/jPK2xx2nA4K9Hf2yiO0tISPPR2ltglN1JraSZljAs:VyXrSu0nY/ty3j3X
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Adds Run key to start application
-