General
- Target SecuriteInfo.com.Win.Trojan.Stealerc-10014035-0.25106.25166.exe
- Size 414KB
- Sample231114-rrt5fsch3y
- SHA256 cdd3fc19ff6129cd6a4ce32c48a2eceb0ed91e3f129e6f660bcfcebeac1296bc
- MD5 2ef4b462085b76741fc850024b75f539
- SHA1 328d8dbfac41b38efd029f5bf498ef8861741ceb
- SHA512 b48d9a6b6caece1a691ef5c32ce1e556871cc57e979daad041f851266e7b42b1ef8a841e7452b78951129bd49cfe99c096ec7ddafae5eeba2a3bc6071fbcec19
- SSDEEP 6144:NyUnkAlR2SaOmUPvbeAOaTdE5H58+tjUJMrC14T2mPokQ1LWnij+IAl:7nkaR2Vkel8+tjU4T2mPoXinij+Iw
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win.Trojan.Stealerc-10014035-0.25106.25166.exe
Resource
win7-20231025-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win.Trojan.Stealerc-10014035-0.25106.25166.exe
Resource
win10v2004-20231023-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
taiga
C2
-
5.42.92.51:19057
Targets
-
- Target SecuriteInfo.com.Win.Trojan.Stealerc-10014035-0.25106.25166.exe
- Size 414KB
- SHA256 cdd3fc19ff6129cd6a4ce32c48a2eceb0ed91e3f129e6f660bcfcebeac1296bc
- MD5 2ef4b462085b76741fc850024b75f539
- SHA1 328d8dbfac41b38efd029f5bf498ef8861741ceb
- SHA512 b48d9a6b6caece1a691ef5c32ce1e556871cc57e979daad041f851266e7b42b1ef8a841e7452b78951129bd49cfe99c096ec7ddafae5eeba2a3bc6071fbcec19
- SSDEEP 6144:NyUnkAlR2SaOmUPvbeAOaTdE5H58+tjUJMrC14T2mPokQ1LWnij+IAl:7nkaR2Vkel8+tjU4T2mPoXinij+Iw
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext