General
-
Target
3f48a4f8768ee6eb34db5f70f49a5aa5c5c29dfc
-
Size
1.9MB
-
Sample
241110-1gr2sawajj
-
MD5
489f36c0732c7f75ac600cb70b4a7539
-
SHA1
3f48a4f8768ee6eb34db5f70f49a5aa5c5c29dfc
-
SHA256
904a84d6703e7310a7d7b5cc3cf5468595b5919570738acc8e42b074f97d7111
-
SHA512
0b163b99fd45c7d159be387a0b14b00860b018515db5a91bb347dd4d5e25946762f79185bede45a3b3804990fe17ed01b7d2ce39d1881fda7de8c70821a2d369
-
SSDEEP
49152:e06m7NpA0GNJ/lU+zJwZjvjcpT+gDEvTqb8Td/pP6F:eA7UJ/5zGZjvjcQgGqYJ
Static task
static1
Behavioral task
behavioral1
Sample
3f48a4f8768ee6eb34db5f70f49a5aa5c5c29dfc.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3f48a4f8768ee6eb34db5f70f49a5aa5c5c29dfc.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
@merlinholy
185.189.167.123:37360
-
auth_value
9c36b63cccb3eade62bdc17519c7bd37
Targets
-
-
Target
3f48a4f8768ee6eb34db5f70f49a5aa5c5c29dfc
-
Size
1.9MB
-
MD5
489f36c0732c7f75ac600cb70b4a7539
-
SHA1
3f48a4f8768ee6eb34db5f70f49a5aa5c5c29dfc
-
SHA256
904a84d6703e7310a7d7b5cc3cf5468595b5919570738acc8e42b074f97d7111
-
SHA512
0b163b99fd45c7d159be387a0b14b00860b018515db5a91bb347dd4d5e25946762f79185bede45a3b3804990fe17ed01b7d2ce39d1881fda7de8c70821a2d369
-
SSDEEP
49152:e06m7NpA0GNJ/lU+zJwZjvjcpT+gDEvTqb8Td/pP6F:eA7UJ/5zGZjvjcQgGqYJ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-