General
-
Target
f4d0e01d739600d5d53398956b1d244b557363e8ddf3e2826912142ebc86e39b
-
Size
414KB
-
Sample
231114-tk67jsde4z
-
MD5
e24840c3471dae7a06ba70d5b94633f8
-
SHA1
cd23f2d95d750219f2b40e5ae376dbd051188ca4
-
SHA256
f4d0e01d739600d5d53398956b1d244b557363e8ddf3e2826912142ebc86e39b
-
SHA512
799636374c223d364af10265f789af0cc2bf3bd22630c407d8b74acc1fb5ef3e1dda47e068fbba71dcc6b911ba45458f9e7ab5c58bef7774231ccbf8bf496fcc
-
SSDEEP
12288:wgUKRE6TdIdOju2/COYWyDIxfAlqMHk+LNZiteS/jn+6O0cCdIh9:UKqmCOYWyDIxfAlqMHk+LNZite6ST0yh
Static task
static1
Behavioral task
behavioral1
Sample
f4d0e01d739600d5d53398956b1d244b557363e8ddf3e2826912142ebc86e39b.exe
Resource
win10-20231020-en
Malware Config
Extracted
redline
taiga
5.42.92.51:19057
Targets
-
-
Target
f4d0e01d739600d5d53398956b1d244b557363e8ddf3e2826912142ebc86e39b
-
Size
414KB
-
MD5
e24840c3471dae7a06ba70d5b94633f8
-
SHA1
cd23f2d95d750219f2b40e5ae376dbd051188ca4
-
SHA256
f4d0e01d739600d5d53398956b1d244b557363e8ddf3e2826912142ebc86e39b
-
SHA512
799636374c223d364af10265f789af0cc2bf3bd22630c407d8b74acc1fb5ef3e1dda47e068fbba71dcc6b911ba45458f9e7ab5c58bef7774231ccbf8bf496fcc
-
SSDEEP
12288:wgUKRE6TdIdOju2/COYWyDIxfAlqMHk+LNZiteS/jn+6O0cCdIh9:UKqmCOYWyDIxfAlqMHk+LNZite6ST0yh
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext
-