General
- Target SecuriteInfo.com.Win32.TrojanX-gen.21445.15786.exe
- Size 414KB
- Sample231114-y29ffshb31
- SHA256 743754530bf3cdcf57d1f00030b109ffce1431d59d3bb0db3af2c45a57523928
- MD5 3c256ec2ba6723523ea27692e7f2f755
- SHA1 e2a9d3ed72c5b03a056cdd169d642ed3c0318f33
- SHA512 cd887a4f22e75a5dc217c052417a36ac9f5764b141b5a923cef840716be3b5a33c7b7cfc2cc43e8e6c15de0d6e74a63d3cdadc825bf8d0758bca2b9379069fb8
- SSDEEP 6144:Jz5gUwlREXKMmn/P3dAOeXziPggL8hAoHbI9n/kVcdfVl9:XgUKRE6Td/PggL8+3kqdff9
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.TrojanX-gen.21445.15786.exe
Resource
win7-20231020-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.TrojanX-gen.21445.15786.exe
Resource
win10v2004-20231020-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
taiga
C2
-
5.42.92.51:19057
Targets
-
- Target SecuriteInfo.com.Win32.TrojanX-gen.21445.15786.exe
- Size 414KB
- SHA256 743754530bf3cdcf57d1f00030b109ffce1431d59d3bb0db3af2c45a57523928
- MD5 3c256ec2ba6723523ea27692e7f2f755
- SHA1 e2a9d3ed72c5b03a056cdd169d642ed3c0318f33
- SHA512 cd887a4f22e75a5dc217c052417a36ac9f5764b141b5a923cef840716be3b5a33c7b7cfc2cc43e8e6c15de0d6e74a63d3cdadc825bf8d0758bca2b9379069fb8
- SSDEEP 6144:Jz5gUwlREXKMmn/P3dAOeXziPggL8hAoHbI9n/kVcdfVl9:XgUKRE6Td/PggL8+3kqdff9
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext