General
-
Target
Photoshop_Set-Up (Crack).rar
-
Size
317KB
-
Sample
240505-l14glaaa44
-
MD5
d1e9e15468b64318d2303391c8f06089
-
SHA1
8f634b142e45efdf4c020bd54da06d9f2c1e811d
-
SHA256
7324a5ba7985907b4d8be1365d6b243bf90da9d33c0aa5b80d3753e17fca10d2
-
SHA512
985f6f58db4680725b619a90d395d264c8840cff83520494415002d7c539bfae3e4255d8209184ea35ffd74b58a34505779a04ec302676ef793bc16891182857
-
SSDEEP
6144:DhrYm/1CdyrkHbj16mXaRfJxzApQvERhIV9ByhkM9wTGqx3PhGwg4:DhrJ1gHVcBxzApQlQ+M9wXxVX
Static task
static1
Behavioral task
behavioral1
Sample
Photoshop_Set-Up.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Photoshop_Set-Up.exe
Resource
win10v2004-20240419-en
Malware Config
Extracted
redline
@Nikitosikkc123
45.15.156.167:80
Targets
-
-
Target
Photoshop_Set-Up.exe
-
Size
648KB
-
MD5
9e2ac58b568bd485fa021d4739adce5a
-
SHA1
f2485830a92e389da6efddf51294d67f5a2cdb2b
-
SHA256
a402088ca07607fa3da57d19fa0cd2b14a2df0d774b0b5578fe50ff42fece8fb
-
SHA512
e9eb4a8ef5c6e4dc68526ad24d77a751b0c068dcced62da25ebce364e3dd98df575f0af8719f64b0dffb2fc988089eae479ab5afd6dfb8b7a3993cf24078129a
-
SSDEEP
12288:uqM8KfdgHVqnI9oOWpryhDrDLsPLws+zwn90RNYiVBdH0W4UsySYSja/48u85qpK:bzkdg1iUoOWFo
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-