General
-
Target
8ef0ebaa3b5dc0dbcae4fa07615ef639.exe
-
Size
957KB
-
Sample
230819-llgdhsgg42
-
MD5
8ef0ebaa3b5dc0dbcae4fa07615ef639
-
SHA1
e1e72975b7c46549938298f8e4ddf0bbed102ea9
-
SHA256
b0e12333e12e7d99f9f4d43c0b6545c79634569fed724c5086b642061ec61065
-
SHA512
780850e3ecfcaef12bc6215b074c284554306982845fe73d6105fdf98074044ee88ad6e393e32252d204ba4332d9cd7a57f5abbf23f602289196384a5e3b2d3a
-
SSDEEP
24576:jyxkLAFS2N1DU6MgiUnc/UVrts1Uirntj:2mghKAOYG17rn
Static task
static1
Behavioral task
behavioral1
Sample
8ef0ebaa3b5dc0dbcae4fa07615ef639.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8ef0ebaa3b5dc0dbcae4fa07615ef639.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
dugin
77.91.124.73:19071
-
auth_value
7c3e46e091100fd26a6076996d374c28
Targets
-
-
Target
8ef0ebaa3b5dc0dbcae4fa07615ef639.exe
-
Size
957KB
-
MD5
8ef0ebaa3b5dc0dbcae4fa07615ef639
-
SHA1
e1e72975b7c46549938298f8e4ddf0bbed102ea9
-
SHA256
b0e12333e12e7d99f9f4d43c0b6545c79634569fed724c5086b642061ec61065
-
SHA512
780850e3ecfcaef12bc6215b074c284554306982845fe73d6105fdf98074044ee88ad6e393e32252d204ba4332d9cd7a57f5abbf23f602289196384a5e3b2d3a
-
SSDEEP
24576:jyxkLAFS2N1DU6MgiUnc/UVrts1Uirntj:2mghKAOYG17rn
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-