General
-
Target
1691b2ee0e48cabf65eb5194a94fd7b8ddd466cf95784d0a2388ab4a7ae5a6b1
-
Size
1.4MB
-
Sample
230828-t3nsxsfh5t
-
MD5
279a60552d335d859ca33240b7d25dce
-
SHA1
341ab273d3af4da7a10accefd117ace271fc6594
-
SHA256
1691b2ee0e48cabf65eb5194a94fd7b8ddd466cf95784d0a2388ab4a7ae5a6b1
-
SHA512
e3ea4b0c6e95007bf1e051046bdbe47e7bf6b52391bfbcfd39db3718d2d43a1212030adcbac42e4897d7c1b61401177e93ccb175a5a17b7c63117a6f644b5040
-
SSDEEP
24576:/ygVhsu98ngcfvyKRv9bl4EwYu3Qz8k5/WZ5YB/6/ljNeau:KSBmCKRv9bWE3Mk5ePc6/lx
Static task
static1
Behavioral task
behavioral1
Sample
1691b2ee0e48cabf65eb5194a94fd7b8ddd466cf95784d0a2388ab4a7ae5a6b1.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
amadey
3.87
77.91.68.18/nice/index.php
Extracted
redline
stas
77.91.124.82:19071
-
auth_value
db6d96c4eade05afc28c31d9ad73a73c
Targets
-
-
Target
1691b2ee0e48cabf65eb5194a94fd7b8ddd466cf95784d0a2388ab4a7ae5a6b1
-
Size
1.4MB
-
MD5
279a60552d335d859ca33240b7d25dce
-
SHA1
341ab273d3af4da7a10accefd117ace271fc6594
-
SHA256
1691b2ee0e48cabf65eb5194a94fd7b8ddd466cf95784d0a2388ab4a7ae5a6b1
-
SHA512
e3ea4b0c6e95007bf1e051046bdbe47e7bf6b52391bfbcfd39db3718d2d43a1212030adcbac42e4897d7c1b61401177e93ccb175a5a17b7c63117a6f644b5040
-
SSDEEP
24576:/ygVhsu98ngcfvyKRv9bl4EwYu3Qz8k5/WZ5YB/6/ljNeau:KSBmCKRv9bWE3Mk5ePc6/lx
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-