General
- Target 66a36d181f71e843c0225081b857020d.exe
- Size 367KB
- Sample231002-sp6wxadf38
- SHA256 1ec5a3b689696efda3e0217499865244bd9a5df29965e09745df69e7104fad97
- MD5 66a36d181f71e843c0225081b857020d
- SHA1 de28ef3ffc450811c0af7065e64fbf32c73395c1
- SHA512 90fc5df085fa7fbdb6d3a5099a3a84a9b35e4050f32db34c75c329255101fb835705b5350f3d4341be495770afe47985b4a8d2219191cde7d54dc79bc8221c68
- SSDEEP 6144:ImJqFODkY2/83sUcLcMRtAK5obWOjWifVhwXEdx:ImcODTQUcQMRtAKKbWBIFx
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
66a36d181f71e843c0225081b857020d.exe
Resource
win7-20230831-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
66a36d181f71e843c0225081b857020d.exe
Resource
win10v2004-20230915-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
genda
C2
-
77.91.124.55:19071
Targets
-
- Target 66a36d181f71e843c0225081b857020d.exe
- Size 367KB
- SHA256 1ec5a3b689696efda3e0217499865244bd9a5df29965e09745df69e7104fad97
- MD5 66a36d181f71e843c0225081b857020d
- SHA1 de28ef3ffc450811c0af7065e64fbf32c73395c1
- SHA512 90fc5df085fa7fbdb6d3a5099a3a84a9b35e4050f32db34c75c329255101fb835705b5350f3d4341be495770afe47985b4a8d2219191cde7d54dc79bc8221c68
- SSDEEP 6144:ImJqFODkY2/83sUcLcMRtAK5obWOjWifVhwXEdx:ImcODTQUcQMRtAKKbWBIFx
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext