General
- Target ffeaec655843a2e8f6a156144fd8b684.exe
- Size 415KB
- Sample231114-lbcycaah65
- SHA256 6e627ca700a4794c9e46a849daed709312bacf1587109607e2f6c5eebb8a2598
- MD5 ffeaec655843a2e8f6a156144fd8b684
- SHA1 bcb056d3a80a4c855969b3e49dcad305a0e863cb
- SHA512 81dce7a05726409cbe758b0b665c1db62f11d56fbc99f3d050cd30b739a08ca604b4225ca2e1fc8d7ca23f241cf39b4f450cc3ef0bc839164037d6b9a542781d
- SSDEEP 6144:AvilPFF2W+kUanD48AOjGHFI9m3ziGixMjlgJht/lliLZ1awmBegYZT3MJ3NiVQb:hlNF2xv80lI92ofivJ7v/B2D
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ffeaec655843a2e8f6a156144fd8b684.exe
Resource
win7-20231020-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ffeaec655843a2e8f6a156144fd8b684.exe
Resource
win10v2004-20231023-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
taiga
C2
-
5.42.92.51:19057
Targets
-
- Target ffeaec655843a2e8f6a156144fd8b684.exe
- Size 415KB
- SHA256 6e627ca700a4794c9e46a849daed709312bacf1587109607e2f6c5eebb8a2598
- MD5 ffeaec655843a2e8f6a156144fd8b684
- SHA1 bcb056d3a80a4c855969b3e49dcad305a0e863cb
- SHA512 81dce7a05726409cbe758b0b665c1db62f11d56fbc99f3d050cd30b739a08ca604b4225ca2e1fc8d7ca23f241cf39b4f450cc3ef0bc839164037d6b9a542781d
- SSDEEP 6144:AvilPFF2W+kUanD48AOjGHFI9m3ziGixMjlgJht/lliLZ1awmBegYZT3MJ3NiVQb:hlNF2xv80lI92ofivJ7v/B2D
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Suspicious use of SetThreadContext