General
-
Target
0e3508f8361a9cebdedc16c29e24de272c88e9ff21de7175d0fe924d18a9e89b
-
Size
784KB
-
Sample
231012-jfabxage27
-
MD5
69dab86413f92fe8993c1cfe9e7e669b
-
SHA1
1dcbe52b8fbb742bdee9bb9e1ea19aa02e1ef51b
-
SHA256
0e3508f8361a9cebdedc16c29e24de272c88e9ff21de7175d0fe924d18a9e89b
-
SHA512
aeddc58f50795b98234f58342b170aad156a6e01329a250de8233e46b5145b8dd216e7c76a5dbe9f5afb4fb6df0b7f0d8f6e6c254d041b0d387fe2fb7ad2fe4a
-
SSDEEP
24576:wy2JQsE2dwYRGk8xwDfOiai0mACblSIb1X:32JdzrRGkTifiM2D
Static task
static1
Behavioral task
behavioral1
Sample
0e3508f8361a9cebdedc16c29e24de272c88e9ff21de7175d0fe924d18a9e89b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0e3508f8361a9cebdedc16c29e24de272c88e9ff21de7175d0fe924d18a9e89b.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
redline
buben
77.91.124.82:19071
-
auth_value
c62fa04aa45f5b78f62d2c21fcbefdec
Targets
-
-
Target
0e3508f8361a9cebdedc16c29e24de272c88e9ff21de7175d0fe924d18a9e89b
-
Size
784KB
-
MD5
69dab86413f92fe8993c1cfe9e7e669b
-
SHA1
1dcbe52b8fbb742bdee9bb9e1ea19aa02e1ef51b
-
SHA256
0e3508f8361a9cebdedc16c29e24de272c88e9ff21de7175d0fe924d18a9e89b
-
SHA512
aeddc58f50795b98234f58342b170aad156a6e01329a250de8233e46b5145b8dd216e7c76a5dbe9f5afb4fb6df0b7f0d8f6e6c254d041b0d387fe2fb7ad2fe4a
-
SSDEEP
24576:wy2JQsE2dwYRGk8xwDfOiai0mACblSIb1X:32JdzrRGkTifiM2D
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-