General
-
Target
173d85a8f238cd4a7c472a9114762b80_NeikiAnalytics.exe
-
Size
172KB
-
Sample
240527-cb9smsdb44
-
MD5
173d85a8f238cd4a7c472a9114762b80
-
SHA1
2a417d4fd2fb7e0d022d8f49137d51fcad4854a8
-
SHA256
c1bcfb60e7433140ce49a913b51563a80685d3a042f22c4711fd84141b3b42bd
-
SHA512
4b0480659ebee33ce0fb6ca66fb48905dd1d8b6ca6902b6b3f44c1fa9dd66678d7d3bc7236d0f524441f7551f9ee3d1aa4626ef2b62d999562d174456b97e857
-
SSDEEP
1536:6DrRuq1Ps36sv0W7TRVOQM6fwrHwhn/rQbg5fb25LxNcqYQHnbuxaNLQmpTu0Gkk:28sO/O2DnEba0LxNEyPNcmpTui8e8hT
Behavioral task
behavioral1
Sample
173d85a8f238cd4a7c472a9114762b80_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
173d85a8f238cd4a7c472a9114762b80_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
redline
kira
77.91.68.48:19071
-
auth_value
1677a40fd8997eb89377e1681911e9c6
Targets
-
-
Target
173d85a8f238cd4a7c472a9114762b80_NeikiAnalytics.exe
-
Size
172KB
-
MD5
173d85a8f238cd4a7c472a9114762b80
-
SHA1
2a417d4fd2fb7e0d022d8f49137d51fcad4854a8
-
SHA256
c1bcfb60e7433140ce49a913b51563a80685d3a042f22c4711fd84141b3b42bd
-
SHA512
4b0480659ebee33ce0fb6ca66fb48905dd1d8b6ca6902b6b3f44c1fa9dd66678d7d3bc7236d0f524441f7551f9ee3d1aa4626ef2b62d999562d174456b97e857
-
SSDEEP
1536:6DrRuq1Ps36sv0W7TRVOQM6fwrHwhn/rQbg5fb25LxNcqYQHnbuxaNLQmpTu0Gkk:28sO/O2DnEba0LxNEyPNcmpTui8e8hT
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-