General
-
Target
44b48cb323cf659148bf76763a271a5c0a3848a3124691540b5152a26d8f43c5.exe
-
Size
517KB
-
Sample
241120-xn2b9awlfl
-
MD5
3fe247aeec27844a59889b6346408ab8
-
SHA1
7097ee2ba26d8e884b9a8649f3f259fb94dd5a64
-
SHA256
44b48cb323cf659148bf76763a271a5c0a3848a3124691540b5152a26d8f43c5
-
SHA512
277b770cf8c3df4bc4c606d0821a6dc43ca5adf30f0f5f68111987f44d5f786d402c3c04d0eef081473e526d12c6a548091ce3ce45c142fa42bcec91f17b73ea
-
SSDEEP
3072:AovMn9OFckvzvs6fsoZxOWiyUkVwDCw2yZjCgEPwbZmp+THPJZ9k+i8M:AovO9OFcczE6fsW4W5rVcjHCgTpNZ9N0
Static task
static1
Behavioral task
behavioral1
Sample
44b48cb323cf659148bf76763a271a5c0a3848a3124691540b5152a26d8f43c5.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
44b48cb323cf659148bf76763a271a5c0a3848a3124691540b5152a26d8f43c5.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
141.94.188.138:46419
-
auth_value
3f48b95855158031ae9e7dafcb203009
Targets
-
-
Target
44b48cb323cf659148bf76763a271a5c0a3848a3124691540b5152a26d8f43c5.exe
-
Size
517KB
-
MD5
3fe247aeec27844a59889b6346408ab8
-
SHA1
7097ee2ba26d8e884b9a8649f3f259fb94dd5a64
-
SHA256
44b48cb323cf659148bf76763a271a5c0a3848a3124691540b5152a26d8f43c5
-
SHA512
277b770cf8c3df4bc4c606d0821a6dc43ca5adf30f0f5f68111987f44d5f786d402c3c04d0eef081473e526d12c6a548091ce3ce45c142fa42bcec91f17b73ea
-
SSDEEP
3072:AovMn9OFckvzvs6fsoZxOWiyUkVwDCw2yZjCgEPwbZmp+THPJZ9k+i8M:AovO9OFcczE6fsW4W5rVcjHCgTpNZ9N0
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-