General
- Target 650367e04f89478b785018e1575b636c77dd33a5437dcb0e79d01052770a1758
- Size 415KB
- Sample231114-mg84eabe2z
- SHA256 650367e04f89478b785018e1575b636c77dd33a5437dcb0e79d01052770a1758
- MD5 7ce5c0bb72f3dd64d2abd61d6fb796bd
- SHA1 5530da5cbb9fc6657094b7f60537c5b1de966c82
- SHA512 95d2d818ac19c78e57a9d1bfd07483ee2fa0cdc8d4363f10d1ba5da33eb689d6c1e90afa6df26b0d0a370c912503d90dd6ff735a6b2723a3e77b922883d4f197
- SSDEEP 6144:9/IU/FKe4lNUq/Vr58AOB0HBdsG578HT3BEH5k20YTj0:aU9KeIB58EhdsGMGZk24
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
650367e04f89478b785018e1575b636c77dd33a5437dcb0e79d01052770a1758.exe
Resource
win10-20231020-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
taiga
C2
-
5.42.92.51:19057
Targets
-
- Target 650367e04f89478b785018e1575b636c77dd33a5437dcb0e79d01052770a1758
- Size 415KB
- SHA256 650367e04f89478b785018e1575b636c77dd33a5437dcb0e79d01052770a1758
- MD5 7ce5c0bb72f3dd64d2abd61d6fb796bd
- SHA1 5530da5cbb9fc6657094b7f60537c5b1de966c82
- SHA512 95d2d818ac19c78e57a9d1bfd07483ee2fa0cdc8d4363f10d1ba5da33eb689d6c1e90afa6df26b0d0a370c912503d90dd6ff735a6b2723a3e77b922883d4f197
- SSDEEP 6144:9/IU/FKe4lNUq/Vr58AOB0HBdsG578HT3BEH5k20YTj0:aU9KeIB58EhdsGMGZk24
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Suspicious use of SetThreadContext