General
-
Target
e33363f0dda6ac0fa4e09648b161af55
-
Size
1.9MB
-
Sample
241110-1q3vmswcjn
-
MD5
e33363f0dda6ac0fa4e09648b161af55
-
SHA1
fc1ec2800e78656c8ca28e4ede5f289e45353ab1
-
SHA256
42fbaddd781ff77e8800af376d7159f445bb50a06dc8b03e9ae4b6eb26da231f
-
SHA512
1fc00a6e125516b360a395598d3206217d575f4ffbcbaf0ab435672ef949671f65fc63f02d352c07e4ed1f3d0d96022061465bd8059f4c90c66225c2c57cbdc8
-
SSDEEP
49152:e06m7NpA0GNJ/lU+zJwZjvjcpT+gDEvTqb8Td/pP6F:eA7UJ/5zGZjvjcQgGqYJ
Static task
static1
Behavioral task
behavioral1
Sample
e33363f0dda6ac0fa4e09648b161af55.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
e33363f0dda6ac0fa4e09648b161af55.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
@merlinholy
185.189.167.123:37360
-
auth_value
9c36b63cccb3eade62bdc17519c7bd37
Targets
-
-
Target
e33363f0dda6ac0fa4e09648b161af55
-
Size
1.9MB
-
MD5
e33363f0dda6ac0fa4e09648b161af55
-
SHA1
fc1ec2800e78656c8ca28e4ede5f289e45353ab1
-
SHA256
42fbaddd781ff77e8800af376d7159f445bb50a06dc8b03e9ae4b6eb26da231f
-
SHA512
1fc00a6e125516b360a395598d3206217d575f4ffbcbaf0ab435672ef949671f65fc63f02d352c07e4ed1f3d0d96022061465bd8059f4c90c66225c2c57cbdc8
-
SSDEEP
49152:e06m7NpA0GNJ/lU+zJwZjvjcpT+gDEvTqb8Td/pP6F:eA7UJ/5zGZjvjcQgGqYJ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-