General
-
Target
7229b684c59106c5aa79d260124b91aba4821039abcd01eb0fb18bab452a4a03
-
Size
213KB
-
Sample
241110-3nd5ls1jbk
-
MD5
c25e6474c29035e6a0b07994ef05d08d
-
SHA1
61c0971b503e37dacc97291dc38fb270a8a790f1
-
SHA256
7229b684c59106c5aa79d260124b91aba4821039abcd01eb0fb18bab452a4a03
-
SHA512
bc7c2bb697e0875def8a54007880a1196f5f5437c0086bb6318cbd455f2acc1a9b4727a6f59f591b2c647ea8073a15789e35f2a4a34e90a37a3c6c118e91cfc3
-
SSDEEP
6144:2F2dqRHCEKj/aJ5Dfi2izzD1gIZfS8wgDAG8zc:2OyVKzaJ9ytfZfSwDAG8zc
Static task
static1
Behavioral task
behavioral1
Sample
fc8ae1d5ed647ebb404feb41ea0eeab7e2a1ab49ceac2cf78ebf366fdd66bda8.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
fc8ae1d5ed647ebb404feb41ea0eeab7e2a1ab49ceac2cf78ebf366fdd66bda8.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
135.181.241.192:4327
-
auth_value
a909e2aaecf96137978fea4f86400b9b
Targets
-
-
Target
fc8ae1d5ed647ebb404feb41ea0eeab7e2a1ab49ceac2cf78ebf366fdd66bda8.exe
-
Size
355KB
-
MD5
7fb0614b0d6f42336d086e72ab27505a
-
SHA1
9a47d18ca3e3cdda50f98a72f7a249dd82cc9774
-
SHA256
fc8ae1d5ed647ebb404feb41ea0eeab7e2a1ab49ceac2cf78ebf366fdd66bda8
-
SHA512
7f795adc232843a4ae77f0f5b46eb77340eba05056d8c9fe59322fe1a7a6329b380b2fa53daf318b20451ca83f434da5e525740f1042e699affc2004d87936f6
-
SSDEEP
6144:pqMEWVBziVImDyIO3QQn/Qcw+lplM1sRqyjxr7ya3F5rTcys0W1:pqMEWzziVneVCGqy9/LV1ZsJ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-