General
- Target file.exe
- Size 415KB
- Sample231114-kr54dsaa6s
- SHA256 3e5d50f9256e94ff3a0e33bd30c01998a5cf299daf96808747729fb72650eab1
- MD5 0cf947c3d5ed2e3ac3bb3c091d2f6240
- SHA1 4866b28bee9d7cc5de63a9461329a313645e53b0
- SHA512 cff9ab0fde293a5e8aff1fa63284e64fe7d5d23b4bcee3edf27bc3064a857b2b51a9e6ced125aa1893d3ff8e23e9a0c2c6e2bb4546bb6c9a8ad977b1167dd4d8
- SSDEEP 6144:8pIU/FKe4lNUq/Vr58AOD0HfL+YGhNIwXrTCMNHHiXlgdRTa8Ob5lP0:JU9KeIB58yj+YaNhr0KHwb5l8
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20231020-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20231023-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
taiga
C2
-
5.42.92.51:19057
Targets
-
- Target file.exe
- Size 415KB
- SHA256 3e5d50f9256e94ff3a0e33bd30c01998a5cf299daf96808747729fb72650eab1
- MD5 0cf947c3d5ed2e3ac3bb3c091d2f6240
- SHA1 4866b28bee9d7cc5de63a9461329a313645e53b0
- SHA512 cff9ab0fde293a5e8aff1fa63284e64fe7d5d23b4bcee3edf27bc3064a857b2b51a9e6ced125aa1893d3ff8e23e9a0c2c6e2bb4546bb6c9a8ad977b1167dd4d8
- SSDEEP 6144:8pIU/FKe4lNUq/Vr58AOD0HfL+YGhNIwXrTCMNHHiXlgdRTa8Ob5lP0:JU9KeIB58yj+YaNhr0KHwb5l8
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Suspicious use of SetThreadContext