General
-
Target
5d5c7053040d145c1197162243507b3d
-
Size
1.9MB
-
Sample
241109-1gk88ssgpc
-
MD5
5d5c7053040d145c1197162243507b3d
-
SHA1
bfab17561f4be2b0b2a0adac8b7bac8218a9c549
-
SHA256
da69828f6ab970b76f5543c7326991bf79eb417329998ef2429c009d05facf80
-
SHA512
cdfeb93044a76b9571b6ed20712ebda53ed1b163a324794c3daa2676c8cc99dbb5e5284ed02d5478c16cffbfda35777dda7d27435078cfbb573c41c7288ab600
-
SSDEEP
49152:e06m7NpA0GNJ/lU+zJwZjvjcpT+gDEvTqb8Td/pP6F:eA7UJ/5zGZjvjcQgGqYJ
Static task
static1
Behavioral task
behavioral1
Sample
5d5c7053040d145c1197162243507b3d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5d5c7053040d145c1197162243507b3d.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
@merlinholy
185.189.167.123:37360
-
auth_value
9c36b63cccb3eade62bdc17519c7bd37
Targets
-
-
Target
5d5c7053040d145c1197162243507b3d
-
Size
1.9MB
-
MD5
5d5c7053040d145c1197162243507b3d
-
SHA1
bfab17561f4be2b0b2a0adac8b7bac8218a9c549
-
SHA256
da69828f6ab970b76f5543c7326991bf79eb417329998ef2429c009d05facf80
-
SHA512
cdfeb93044a76b9571b6ed20712ebda53ed1b163a324794c3daa2676c8cc99dbb5e5284ed02d5478c16cffbfda35777dda7d27435078cfbb573c41c7288ab600
-
SSDEEP
49152:e06m7NpA0GNJ/lU+zJwZjvjcpT+gDEvTqb8Td/pP6F:eA7UJ/5zGZjvjcQgGqYJ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-