General
-
Target
file.exe
-
Size
406KB
-
Sample
231013-1dg3eadc76
-
MD5
7d674378f456d6af50892dcd7a9ef7d5
-
SHA1
37c7a3d933b6d91f71f720622eb4ecdd125a0443
-
SHA256
0af6821bfe730759d049249d66b09f8b0ba6cae5c5d774ac229b4811b14f7e89
-
SHA512
623aaa5dcd0725e63dd05dc2f341955f1e19df007541eab2f64a7df7391fe2d5a697f3c23d6b739396de0214cf5e32212d9c7a6243d34e1bc040394f0472f5c9
-
SSDEEP
6144:wAPkUNR+2moeZhHF8pf7wKK4BAOCrN1ksqjMQ48JP3MFOY/PjRTOBS:wlUNR+2yUK4BcrNusqjxnCF7FTOBS
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
redline
smokiez
194.169.175.232:45450
-
auth_value
7b7d8a036038ab89b98f422d559b4f8f
Targets
-
-
Target
file.exe
-
Size
406KB
-
MD5
7d674378f456d6af50892dcd7a9ef7d5
-
SHA1
37c7a3d933b6d91f71f720622eb4ecdd125a0443
-
SHA256
0af6821bfe730759d049249d66b09f8b0ba6cae5c5d774ac229b4811b14f7e89
-
SHA512
623aaa5dcd0725e63dd05dc2f341955f1e19df007541eab2f64a7df7391fe2d5a697f3c23d6b739396de0214cf5e32212d9c7a6243d34e1bc040394f0472f5c9
-
SSDEEP
6144:wAPkUNR+2moeZhHF8pf7wKK4BAOCrN1ksqjMQ48JP3MFOY/PjRTOBS:wlUNR+2yUK4BcrNusqjxnCF7FTOBS
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext
-