General
-
Target
9300729c932ecd63e9459ea12eccca095de7269fe14b525a52e25f09d3f8f6af
-
Size
1.9MB
-
Sample
241111-bbb1yayjgw
-
MD5
1fe4763e551f589ccdfd95c1c76f26b1
-
SHA1
1af61e74f0f9150ff39e7e373c3babeef85d7f7e
-
SHA256
9300729c932ecd63e9459ea12eccca095de7269fe14b525a52e25f09d3f8f6af
-
SHA512
39d5aa945580557a814c495d55d7b6b9553196d1fd23194d3bedcb9bab747f9ef55892c6bbbcedb3031329c706103dd1187ad28454b9b630d19db05302f4b119
-
SSDEEP
49152:e06m7NpA0GNJ/lU+zJwZjvjcpT+gDEvTqb8Td/pP6F:eA7UJ/5zGZjvjcQgGqYJ
Static task
static1
Behavioral task
behavioral1
Sample
9300729c932ecd63e9459ea12eccca095de7269fe14b525a52e25f09d3f8f6af.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9300729c932ecd63e9459ea12eccca095de7269fe14b525a52e25f09d3f8f6af.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
@merlinholy
185.189.167.123:37360
-
auth_value
9c36b63cccb3eade62bdc17519c7bd37
Targets
-
-
Target
9300729c932ecd63e9459ea12eccca095de7269fe14b525a52e25f09d3f8f6af
-
Size
1.9MB
-
MD5
1fe4763e551f589ccdfd95c1c76f26b1
-
SHA1
1af61e74f0f9150ff39e7e373c3babeef85d7f7e
-
SHA256
9300729c932ecd63e9459ea12eccca095de7269fe14b525a52e25f09d3f8f6af
-
SHA512
39d5aa945580557a814c495d55d7b6b9553196d1fd23194d3bedcb9bab747f9ef55892c6bbbcedb3031329c706103dd1187ad28454b9b630d19db05302f4b119
-
SSDEEP
49152:e06m7NpA0GNJ/lU+zJwZjvjcpT+gDEvTqb8Td/pP6F:eA7UJ/5zGZjvjcQgGqYJ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-