General
-
Target
772abd60da2fe5291ad41246011d7bcc83f8f8c994e03a9dd711a8b6c8990f89
-
Size
251KB
-
Sample
241111-a9aebsyepk
-
MD5
c6e8778ed52a20e4fab9469e72fa7846
-
SHA1
55286bdb34547d39c3cb39a2503acc2418361415
-
SHA256
772abd60da2fe5291ad41246011d7bcc83f8f8c994e03a9dd711a8b6c8990f89
-
SHA512
1192e05b757a0431ffc59288ea6cc06d2f3de5e608f0f078937b7566fc6695dcecf1ca043873367b3cb7dae1b226d6c9a742c24d548f75c61ce55e604b4a19f9
-
SSDEEP
6144:ooW7Z2JXt8xvDWrrGn8ohKrpHoAVoEdVpS/BLGgyrr:z9ovwuEFaEn4v+r
Behavioral task
behavioral1
Sample
Elsify.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Elsify.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Mono.Cecil.Mdb.dll
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
Mono.Cecil.Mdb.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Mono.Cecil.Pdb.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Mono.Cecil.Pdb.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Mono.Cecil.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Mono.Cecil.dll
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
wcmFr5xKM66WkyVK
45.42.45.232:53637
Targets
-
-
Target
Elsify.exe
-
Size
130KB
-
MD5
aeed3dd9e999b2d1c1b57a4250b4fec7
-
SHA1
5f086d464e9d7b68e8220926f4ccafb56cf416c0
-
SHA256
2d30de2a208160f26fe60529f460e1489104bde480b0007be47cd2f99cb52d97
-
SHA512
4fdabb500ff26408f37a0be4780e86f5c2ec20243a3f1d8ece5ded15919584d172850d69997b4003dd3ceb7715813eaf90eda358100e6bdb035d11e52c70fe78
-
SSDEEP
3072:6sUOYP+zi0ZbYe1g0ujyzdjveomqoIIK:6JOYWG0Lahy5iqoII
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
SectopRAT payload
-
Sectoprat family
-
-
-
Target
Mono.Cecil.Mdb.dll
-
Size
42KB
-
MD5
1c6aca0f1b1fa1661fc1e43c79334f7c
-
SHA1
ec0f591a6d12e1ea7dc8714ec7e5ad7a04ef455d
-
SHA256
411f8ed8c49738fa38a56ed8f991d556227d13602e83186e66ae1c4f821c940b
-
SHA512
1c59e939d108f15881d29fe4ced4e5fa4a4476394b58b6eb464da77192cb8fe9221b7cd780af4596914d4cce7c3fc53f1bb567f944c58829de8efbe1fd87be76
-
SSDEEP
768:Ar5EYZep98C87KHeBUZwrEzsEAnbF+em50KktmM4CRIcZwMRTIzMAtpw:Ar59g98C87KHeBUb5AnZG+zdwMRTzAtS
Score1/10 -
-
-
Target
Mono.Cecil.Pdb.dll
-
Size
87KB
-
MD5
6d5eb860c2be5dbeb470e7d3f3e7dda4
-
SHA1
80c76660b87c52127b1a7da48e27700f75362041
-
SHA256
447ede1984bb4acd73bd97c0ec57a11c079cee8301c91fb199ca98c1906d3cc4
-
SHA512
64cf4fe7de68a35720d2b9338ba9cf182e127d95d72d2ccf7ff5c73a368133663e70c988a460825fa87b2d03717a4447948d5262f56aceb7c3bf1cb3ab5a41a5
-
SSDEEP
1536:2OCAsdBo+am5OMwr5IlALYKXgAJGsZhTjrjvjCXeO:ZCjta0OMuIlArVJGqT/jveXeO
Score1/10 -
-
-
Target
Mono.Cecil.dll
-
Size
350KB
-
MD5
de69bb29d6a9dfb615a90df3580d63b1
-
SHA1
74446b4dcc146ce61e5216bf7efac186adf7849b
-
SHA256
f66f97866433e688acc3e4cd1e6ef14505f81df6b26dd6215e376767f6f954bc
-
SHA512
6e96a510966a4acbca900773d4409720b0771fede37f24431bf0d8b9c611eaa152ba05ee588bb17f796d7b8caaccc10534e7cc1c907c28ddfa54ac4ce3952015
-
SSDEEP
6144:jIevdbLPNYe8bikm98KXPHhOWY/fFREomhUFD3z:se1PNL+QRfBg/f/EWFD
Score1/10 -