General
-
Target
1a57bf71f1863522e92c5dc2c0efdb7a
-
Size
365KB
-
Sample
231225-nfg4zadee9
-
MD5
1a57bf71f1863522e92c5dc2c0efdb7a
-
SHA1
90763a9de48c62a03614e0ee4b4b368aa665d5e7
-
SHA256
554a25e7d368633e1a8423949834119eaa6cb812e49b9968004ea0421c538442
-
SHA512
4921a1aad6aa116273b117bc0dba522efea0631528c37c7a29cfd22ece6295badff1995a6a17b4ec7f7ba06776cac632e388240500989e6844e9551d3cd83295
-
SSDEEP
6144:k73LvCkrKRjYzEIL1ET9SNgwqbtm58YKYmmZ:kLLvxrKRj1IL1ET9SNgwstm58YKYmmZ
Static task
static1
Behavioral task
behavioral1
Sample
1a57bf71f1863522e92c5dc2c0efdb7a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a57bf71f1863522e92c5dc2c0efdb7a.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
redline
@nondontinfo
188.130.139.12:23747
Targets
-
-
Target
1a57bf71f1863522e92c5dc2c0efdb7a
-
Size
365KB
-
MD5
1a57bf71f1863522e92c5dc2c0efdb7a
-
SHA1
90763a9de48c62a03614e0ee4b4b368aa665d5e7
-
SHA256
554a25e7d368633e1a8423949834119eaa6cb812e49b9968004ea0421c538442
-
SHA512
4921a1aad6aa116273b117bc0dba522efea0631528c37c7a29cfd22ece6295badff1995a6a17b4ec7f7ba06776cac632e388240500989e6844e9551d3cd83295
-
SSDEEP
6144:k73LvCkrKRjYzEIL1ET9SNgwqbtm58YKYmmZ:kLLvxrKRj1IL1ET9SNgwstm58YKYmmZ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SectopRAT payload
-
Suspicious use of SetThreadContext
-