General
-
Target
acdfd68fcdfda7180ceb6cbd4f1fab32
-
Size
301KB
-
Sample
241111-a23e5sydkm
-
MD5
acdfd68fcdfda7180ceb6cbd4f1fab32
-
SHA1
3fed0679391e1bffb189a5a6c18db80dd950a133
-
SHA256
c58dd9f6d0cc8c25216faf5d93f984acc3cbb7fd0ec0c78ded4d7ae98b2627b8
-
SHA512
b5d6b3858aaf22e3878959ac5b06da0b64b5eb9b6c4d81e640da8f7363fd5ab2ba8e5f565ac703df229747f905bdf08d1b55259a9c620b571bed3fd25bf90870
-
SSDEEP
6144:c9oAdBhXnbCib7zW7hAOli0jk6OJQu4SS/p2bSxPyW0lA5JNo:cGAdB94NO0jk6OJ2SG2bEPyRG5ro
Static task
static1
Behavioral task
behavioral1
Sample
acdfd68fcdfda7180ceb6cbd4f1fab32.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
acdfd68fcdfda7180ceb6cbd4f1fab32.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
9-5
139.99.32.83:43199
-
auth_value
637de2b47f42d9cc7912f71cb6b57b5b
Targets
-
-
Target
acdfd68fcdfda7180ceb6cbd4f1fab32
-
Size
301KB
-
MD5
acdfd68fcdfda7180ceb6cbd4f1fab32
-
SHA1
3fed0679391e1bffb189a5a6c18db80dd950a133
-
SHA256
c58dd9f6d0cc8c25216faf5d93f984acc3cbb7fd0ec0c78ded4d7ae98b2627b8
-
SHA512
b5d6b3858aaf22e3878959ac5b06da0b64b5eb9b6c4d81e640da8f7363fd5ab2ba8e5f565ac703df229747f905bdf08d1b55259a9c620b571bed3fd25bf90870
-
SSDEEP
6144:c9oAdBhXnbCib7zW7hAOli0jk6OJQu4SS/p2bSxPyW0lA5JNo:cGAdB94NO0jk6OJ2SG2bEPyRG5ro
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-