General
-
Target
12b9fa03037081a2d6ae10836b8791a0_NeikiAnalytics.exe
-
Size
172KB
-
Sample
240527-bc2mzsae7w
-
MD5
12b9fa03037081a2d6ae10836b8791a0
-
SHA1
7d93e01d72f9d1c931ced1e30f2be37bfd75123f
-
SHA256
58699b2b3fa5153d09d39dcf00fe5460ebc8cc693ab443b0f8113c87c8af6442
-
SHA512
25cce5472cabcf920d4449d9c301ad41914ad3c357c3a0f749627b42d6f7041a622b3810e2545f4c24a4179258198c2ab5117a4338ef3dbc4c9cffc0ddebc2df
-
SSDEEP
1536:vDrRuq1Ps36sv0W7TRVOQM6fwrHwhn/rQbg5fb25LxNcqYQHnbuxaNLQmpTu0Gkk:L8sO/O2DnEba0LxNEyPNcmpTui8e8hT
Behavioral task
behavioral1
Sample
12b9fa03037081a2d6ae10836b8791a0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
12b9fa03037081a2d6ae10836b8791a0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
redline
kira
77.91.68.48:19071
-
auth_value
1677a40fd8997eb89377e1681911e9c6
Targets
-
-
Target
12b9fa03037081a2d6ae10836b8791a0_NeikiAnalytics.exe
-
Size
172KB
-
MD5
12b9fa03037081a2d6ae10836b8791a0
-
SHA1
7d93e01d72f9d1c931ced1e30f2be37bfd75123f
-
SHA256
58699b2b3fa5153d09d39dcf00fe5460ebc8cc693ab443b0f8113c87c8af6442
-
SHA512
25cce5472cabcf920d4449d9c301ad41914ad3c357c3a0f749627b42d6f7041a622b3810e2545f4c24a4179258198c2ab5117a4338ef3dbc4c9cffc0ddebc2df
-
SSDEEP
1536:vDrRuq1Ps36sv0W7TRVOQM6fwrHwhn/rQbg5fb25LxNcqYQHnbuxaNLQmpTu0Gkk:L8sO/O2DnEba0LxNEyPNcmpTui8e8hT
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-