General
-
Target
09d276004abf88f6eefde65d3cf03899b5c6eca6ed1025fb18d8047565a945b9_JC.exe
-
Size
948KB
-
Sample
230820-salmesfh59
-
MD5
8723f443a85172e2cc6fad3d5cc871f2
-
SHA1
1f71c22c4cc79de3eb4519d62497a8991f0f9e3d
-
SHA256
09d276004abf88f6eefde65d3cf03899b5c6eca6ed1025fb18d8047565a945b9
-
SHA512
91f5a760af3b2b27c5ae7856cf9565aa2c8100c36e4d6886c663add3d05a758bb31add0a8770c57139962942461effaa9b28ba6f3f4102865d89ee0285008405
-
SSDEEP
24576:tyO8w/+aS4AXTA/BM/WR/RrnP77rst9GocYXOyaLipLFw:IO8wmPhGdnjrsgY7ua
Static task
static1
Behavioral task
behavioral1
Sample
09d276004abf88f6eefde65d3cf03899b5c6eca6ed1025fb18d8047565a945b9_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
09d276004abf88f6eefde65d3cf03899b5c6eca6ed1025fb18d8047565a945b9_JC.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
dugin
77.91.124.73:19071
-
auth_value
7c3e46e091100fd26a6076996d374c28
Targets
-
-
Target
09d276004abf88f6eefde65d3cf03899b5c6eca6ed1025fb18d8047565a945b9_JC.exe
-
Size
948KB
-
MD5
8723f443a85172e2cc6fad3d5cc871f2
-
SHA1
1f71c22c4cc79de3eb4519d62497a8991f0f9e3d
-
SHA256
09d276004abf88f6eefde65d3cf03899b5c6eca6ed1025fb18d8047565a945b9
-
SHA512
91f5a760af3b2b27c5ae7856cf9565aa2c8100c36e4d6886c663add3d05a758bb31add0a8770c57139962942461effaa9b28ba6f3f4102865d89ee0285008405
-
SSDEEP
24576:tyO8w/+aS4AXTA/BM/WR/RrnP77rst9GocYXOyaLipLFw:IO8wmPhGdnjrsgY7ua
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-