General
-
Target
921940fc7dad75b404a566ab0666312ce2a232e282543183c086d3d6cae8f189
-
Size
277KB
-
Sample
241109-s9an7sxdng
-
MD5
77160ec28559631943be8b1b6083bf05
-
SHA1
6a21e860f8d3f99cef4911ee8c838001e0162053
-
SHA256
921940fc7dad75b404a566ab0666312ce2a232e282543183c086d3d6cae8f189
-
SHA512
cb401a7f4fa3e364dc544d902d59d4777d401d3b11454fd7775a61289c85f3aaf931a840c05d8d12731654e690e06157be1182fc2adda7c4f5120799d5111d68
-
SSDEEP
6144:h1NtyTXVo1HbjLdNX9++ydxBxFbK5EZvj/X:h1NtyWpNN+J/K5iLX
Static task
static1
Behavioral task
behavioral1
Sample
921940fc7dad75b404a566ab0666312ce2a232e282543183c086d3d6cae8f189.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
921940fc7dad75b404a566ab0666312ce2a232e282543183c086d3d6cae8f189.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
pub2
89.22.231.25:45245
-
auth_value
ea9464d486a641bb513057e5f63399e1
Targets
-
-
Target
921940fc7dad75b404a566ab0666312ce2a232e282543183c086d3d6cae8f189
-
Size
277KB
-
MD5
77160ec28559631943be8b1b6083bf05
-
SHA1
6a21e860f8d3f99cef4911ee8c838001e0162053
-
SHA256
921940fc7dad75b404a566ab0666312ce2a232e282543183c086d3d6cae8f189
-
SHA512
cb401a7f4fa3e364dc544d902d59d4777d401d3b11454fd7775a61289c85f3aaf931a840c05d8d12731654e690e06157be1182fc2adda7c4f5120799d5111d68
-
SSDEEP
6144:h1NtyTXVo1HbjLdNX9++ydxBxFbK5EZvj/X:h1NtyWpNN+J/K5iLX
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext
-