General
-
Target
f251a7055b834690efbfb0d7d758533c7a57628fdfd3a2220f5e522e8376696b
-
Size
414KB
-
Sample
231114-qqfp1ace9w
-
MD5
7b20f74b9b69a877037765a7fb44fcec
-
SHA1
cc9832ad1c3466abea26c13c3eb57d3e28974970
-
SHA256
f251a7055b834690efbfb0d7d758533c7a57628fdfd3a2220f5e522e8376696b
-
SHA512
fe8f7c6053c94ce44a0687245826d0639c46efcde6edc3561057ae1bb21462e271315bd98d6b07e758797682cc88c3b617df0a7f9d2af12b52552ab8bb296dc4
-
SSDEEP
12288:QiUBuelnknoRNqsnLp70vaRKeQYn97U5C1t:aBpFgvaR597
Static task
static1
Behavioral task
behavioral1
Sample
f251a7055b834690efbfb0d7d758533c7a57628fdfd3a2220f5e522e8376696b.exe
Resource
win10-20231020-en
Malware Config
Extracted
redline
taiga
5.42.92.51:19057
Targets
-
-
Target
f251a7055b834690efbfb0d7d758533c7a57628fdfd3a2220f5e522e8376696b
-
Size
414KB
-
MD5
7b20f74b9b69a877037765a7fb44fcec
-
SHA1
cc9832ad1c3466abea26c13c3eb57d3e28974970
-
SHA256
f251a7055b834690efbfb0d7d758533c7a57628fdfd3a2220f5e522e8376696b
-
SHA512
fe8f7c6053c94ce44a0687245826d0639c46efcde6edc3561057ae1bb21462e271315bd98d6b07e758797682cc88c3b617df0a7f9d2af12b52552ab8bb296dc4
-
SSDEEP
12288:QiUBuelnknoRNqsnLp70vaRKeQYn97U5C1t:aBpFgvaR597
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext
-