General
-
Target
NEAS.07be540f77a46841da70873da9dc75d0_JC.exe
-
Size
1.2MB
-
Sample
231105-dyd5xscc44
-
MD5
07be540f77a46841da70873da9dc75d0
-
SHA1
1befae52fbf114615e8103b59cdf133323eae786
-
SHA256
ac96c1fd0a6ca5210097b682ecb4a13e9722a68ded478856872f6ba503b81439
-
SHA512
6a269eb493dbbef6ef42b998e1ab2ca4eac306a984c72e2c90baf4d4ce1c64220c2754ee47cdef49b03ba8b1ff404c8e448a021476b033269c0302108b0c633e
-
SSDEEP
24576:9mP2dAiItf+BVHjcIoRj3csPc95xDlCU:RItf+BVAIwPAJlC
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.07be540f77a46841da70873da9dc75d0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.07be540f77a46841da70873da9dc75d0_JC.exe
Resource
win10v2004-20231020-en
Malware Config
Extracted
redline
grome
77.91.124.86:19084
Targets
-
-
Target
NEAS.07be540f77a46841da70873da9dc75d0_JC.exe
-
Size
1.2MB
-
MD5
07be540f77a46841da70873da9dc75d0
-
SHA1
1befae52fbf114615e8103b59cdf133323eae786
-
SHA256
ac96c1fd0a6ca5210097b682ecb4a13e9722a68ded478856872f6ba503b81439
-
SHA512
6a269eb493dbbef6ef42b998e1ab2ca4eac306a984c72e2c90baf4d4ce1c64220c2754ee47cdef49b03ba8b1ff404c8e448a021476b033269c0302108b0c633e
-
SSDEEP
24576:9mP2dAiItf+BVHjcIoRj3csPc95xDlCU:RItf+BVAIwPAJlC
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext
-