General
-
Target
722b422042a40f3fe739963a604e8c5d35b2d00c63f1c9215290cb261af4f41e
-
Size
408KB
-
Sample
241112-3elhbswngm
-
MD5
9c68f87ca8142a43129c6f488595bec6
-
SHA1
1eb4b1436c28507c638e169e1cf861579205d0dc
-
SHA256
722b422042a40f3fe739963a604e8c5d35b2d00c63f1c9215290cb261af4f41e
-
SHA512
09d82760be2c081b5fe9d005f3f023e579f1cf0e272641a03d1aea93e4989a818c8892ffecb10bdd073d1dd44c21cfa7400a907303983ad753909d8f69ac70c4
-
SSDEEP
6144:K3bJ/w6L9LUpCFJgnCbdu2x8EyS2IS+K2Xzq7DeVzbxV:KLRw6xLUAnpxOS2odz/px
Static task
static1
Behavioral task
behavioral1
Sample
722b422042a40f3fe739963a604e8c5d35b2d00c63f1c9215290cb261af4f41e.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
722b422042a40f3fe739963a604e8c5d35b2d00c63f1c9215290cb261af4f41e.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
mango
193.233.20.28:4125
-
auth_value
ecf79d7f5227d998a3501c972d915d23
Targets
-
-
Target
722b422042a40f3fe739963a604e8c5d35b2d00c63f1c9215290cb261af4f41e
-
Size
408KB
-
MD5
9c68f87ca8142a43129c6f488595bec6
-
SHA1
1eb4b1436c28507c638e169e1cf861579205d0dc
-
SHA256
722b422042a40f3fe739963a604e8c5d35b2d00c63f1c9215290cb261af4f41e
-
SHA512
09d82760be2c081b5fe9d005f3f023e579f1cf0e272641a03d1aea93e4989a818c8892ffecb10bdd073d1dd44c21cfa7400a907303983ad753909d8f69ac70c4
-
SSDEEP
6144:K3bJ/w6L9LUpCFJgnCbdu2x8EyS2IS+K2Xzq7DeVzbxV:KLRw6xLUAnpxOS2odz/px
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-