General
-
Target
f25934a3f0a47bc9b4de5fab479849e7686b9a5026f5f3047bf1ad4e93f88ab0
-
Size
1.5MB
-
Sample
241110-1gdjdsyner
-
MD5
903660c4284bc53d5d351449e7ab1f67
-
SHA1
0aefdb9b040162bc0b14e902acedef300ebe4308
-
SHA256
f25934a3f0a47bc9b4de5fab479849e7686b9a5026f5f3047bf1ad4e93f88ab0
-
SHA512
475d1c166267d969959f9089c58b99815692f7d9593f324382f82c9a77ed9e84c53fa4995e80e89d04cf4cf7b2fd404ab3bb65330b71de7adb1fdfb4d32658eb
-
SSDEEP
6144:AsGMTIQl2t9xKQzAAOfUK+1BKt1zPhUIGJFlPl:AfMTIg2xANE1By7GJ3Pl
Static task
static1
Behavioral task
behavioral1
Sample
f25934a3f0a47bc9b4de5fab479849e7686b9a5026f5f3047bf1ad4e93f88ab0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f25934a3f0a47bc9b4de5fab479849e7686b9a5026f5f3047bf1ad4e93f88ab0.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
@hsm6666
45.15.156.155:80
-
auth_value
d06f083893a0fb35c011606746c05ab9
Targets
-
-
Target
f25934a3f0a47bc9b4de5fab479849e7686b9a5026f5f3047bf1ad4e93f88ab0
-
Size
1.5MB
-
MD5
903660c4284bc53d5d351449e7ab1f67
-
SHA1
0aefdb9b040162bc0b14e902acedef300ebe4308
-
SHA256
f25934a3f0a47bc9b4de5fab479849e7686b9a5026f5f3047bf1ad4e93f88ab0
-
SHA512
475d1c166267d969959f9089c58b99815692f7d9593f324382f82c9a77ed9e84c53fa4995e80e89d04cf4cf7b2fd404ab3bb65330b71de7adb1fdfb4d32658eb
-
SSDEEP
6144:AsGMTIQl2t9xKQzAAOfUK+1BKt1zPhUIGJFlPl:AfMTIg2xANE1By7GJ3Pl
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-