General
-
Target
bfc71ec4fe1f69a5717a59b03cba871481dd19d4994b8a5606bbc9a949fefdbf
-
Size
1.9MB
-
Sample
241111-cqb5xszkcy
-
MD5
46c25ba18cdddaea601b3d54bee2b689
-
SHA1
8b9aa9bb9932e1d2b729f172330ed305a636c6e1
-
SHA256
bfc71ec4fe1f69a5717a59b03cba871481dd19d4994b8a5606bbc9a949fefdbf
-
SHA512
0015afc65318e2df8c070b61d9ae1e105b5d3d7599dbb4b46823c7175d9549ea175fb9dbfdb84c1bcbe73dedc29c35038f57c5195c5e279a3832066d9268d19d
-
SSDEEP
49152:e06m7NpA0GNJ/lU+zJwZjvjcpT+gDEvTqb8Td/pP6F:eA7UJ/5zGZjvjcQgGqYJ
Static task
static1
Behavioral task
behavioral1
Sample
bfc71ec4fe1f69a5717a59b03cba871481dd19d4994b8a5606bbc9a949fefdbf.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
bfc71ec4fe1f69a5717a59b03cba871481dd19d4994b8a5606bbc9a949fefdbf.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
@merlinholy
185.189.167.123:37360
-
auth_value
9c36b63cccb3eade62bdc17519c7bd37
Targets
-
-
Target
bfc71ec4fe1f69a5717a59b03cba871481dd19d4994b8a5606bbc9a949fefdbf
-
Size
1.9MB
-
MD5
46c25ba18cdddaea601b3d54bee2b689
-
SHA1
8b9aa9bb9932e1d2b729f172330ed305a636c6e1
-
SHA256
bfc71ec4fe1f69a5717a59b03cba871481dd19d4994b8a5606bbc9a949fefdbf
-
SHA512
0015afc65318e2df8c070b61d9ae1e105b5d3d7599dbb4b46823c7175d9549ea175fb9dbfdb84c1bcbe73dedc29c35038f57c5195c5e279a3832066d9268d19d
-
SSDEEP
49152:e06m7NpA0GNJ/lU+zJwZjvjcpT+gDEvTqb8Td/pP6F:eA7UJ/5zGZjvjcQgGqYJ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-