General
-
Target
nuIex_crypted.exe
-
Size
1.8MB
-
Sample
230830-q8a78sfg34
-
MD5
55994b5392dc148b6ffad440403bcf06
-
SHA1
8d81e17eb48aa37f77bfde940d24cb912075ad57
-
SHA256
cfd3caa9dbbbb9d4f6fff3597a2155b5f04e898cd082c84b368fe94943830108
-
SHA512
eb8d1059a71b202f8eb5c3432e55c6b4ad6f51024552ca3b0b6635220232700ad717e86928376f3cf91d579207b9baafbd218e0c65a2c40a726dc78b8ce8ba53
-
SSDEEP
24576:8HIsYF0d7MAjKPQuw0y+9qHfdLKt+i/Y:8Fd7MAjKP3k/dLz
Static task
static1
Behavioral task
behavioral1
Sample
nuIex_crypted.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
nuIex_crypted.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
94.142.138.147:23000
-
auth_value
ccff08893879012905ea16489b7e8ced
Targets
-
-
Target
nuIex_crypted.exe
-
Size
1.8MB
-
MD5
55994b5392dc148b6ffad440403bcf06
-
SHA1
8d81e17eb48aa37f77bfde940d24cb912075ad57
-
SHA256
cfd3caa9dbbbb9d4f6fff3597a2155b5f04e898cd082c84b368fe94943830108
-
SHA512
eb8d1059a71b202f8eb5c3432e55c6b4ad6f51024552ca3b0b6635220232700ad717e86928376f3cf91d579207b9baafbd218e0c65a2c40a726dc78b8ce8ba53
-
SSDEEP
24576:8HIsYF0d7MAjKPQuw0y+9qHfdLKt+i/Y:8Fd7MAjKP3k/dLz
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext
-