General
-
Target
1847786afaa400b8daf06818754765b3
-
Size
696KB
-
Sample
241110-1yr34swhjf
-
MD5
1847786afaa400b8daf06818754765b3
-
SHA1
352c4c1cb8a61f87edb689a633ef0212cb7bcc54
-
SHA256
8cd23c93e05ba34c59dc1a1490b3f309fb94f9743ef4bb474af3abf839f448f7
-
SHA512
ef93cf7e33f0efb74ce9b94394f8e4d87674e3346331fd270763310649e8f8ab2425145a1dc0d23615c16db9ac89ec0711d276e54e0ad6a48776f42f81054031
-
SSDEEP
12288:Ix53DC3orpmfNxnWqQrMTig+7XqO+4qYYjKTVlK2Xck4jhUrrSP0lOIW:iDIorp6NxWqQrMN+7aO+RYD/PFWuOPuM
Static task
static1
Behavioral task
behavioral1
Sample
2696b7a7292422a01a6edb7b1c55afa1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2696b7a7292422a01a6edb7b1c55afa1.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
79.137.192.9:19788
-
auth_value
1b43d503c91d087751245f237058b5aa
Targets
-
-
Target
2696b7a7292422a01a6edb7b1c55afa1
-
Size
2.3MB
-
MD5
2696b7a7292422a01a6edb7b1c55afa1
-
SHA1
4780f2018ac194d0d7dd03a96bb7d0577957c58b
-
SHA256
b72536301ba0b8834cc027b2c9d0bfa887d91c832e04802f96d81778a4c38766
-
SHA512
ed17c92cb2341aae73fead505ccd1f502c73acf0c30d660f00fbb55e1b26eebdb30593b1b2530df080c50e8ed0b0332f96648a4d9cf8445da1030273ce899fe3
-
SSDEEP
24576:5u/wnYMYOpq1BmYOMYhdN5tdxNr1J537v8LWfvSL4pu5l3RuQ55313b:5u/U57378LWfvSM0l3h
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-