General
- Target Photoshop_Set-Up (Crack).rar
- Size 317KB
- Sample240505-l14glaaa44
- SHA256 7324a5ba7985907b4d8be1365d6b243bf90da9d33c0aa5b80d3753e17fca10d2
- MD5 d1e9e15468b64318d2303391c8f06089
- SHA1 8f634b142e45efdf4c020bd54da06d9f2c1e811d
- SHA512 985f6f58db4680725b619a90d395d264c8840cff83520494415002d7c539bfae3e4255d8209184ea35ffd74b58a34505779a04ec302676ef793bc16891182857
- SSDEEP 6144:DhrYm/1CdyrkHbj16mXaRfJxzApQvERhIV9ByhkM9wTGqx3PhGwg4:DhrJ1gHVcBxzApQlQ+M9wXxVX
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Photoshop_Set-Up.exe
Resource
win7-20240221-en
5 signatures
300 seconds
Behavioral task
behavioral2
Sample
Photoshop_Set-Up.exe
Resource
win10v2004-20240419-en
5 signatures
300 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
@Nikitosikkc123
C2
-
45.15.156.167:80
Targets
-
- Target Photoshop_Set-Up.exe
- Size 648KB
- SHA256 a402088ca07607fa3da57d19fa0cd2b14a2df0d774b0b5578fe50ff42fece8fb
- MD5 9e2ac58b568bd485fa021d4739adce5a
- SHA1 f2485830a92e389da6efddf51294d67f5a2cdb2b
- SHA512 e9eb4a8ef5c6e4dc68526ad24d77a751b0c068dcced62da25ebce364e3dd98df575f0af8719f64b0dffb2fc988089eae479ab5afd6dfb8b7a3993cf24078129a
- SSDEEP 12288:uqM8KfdgHVqnI9oOWpryhDrDLsPLws+zwn90RNYiVBdH0W4UsySYSja/48u85qpK:bzkdg1iUoOWFo
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Loads dropped DLL
-
Suspicious use of SetThreadContext