General
-
Target
b59ce70d9ac92e797f5ab44b86d96670e7e4cf46f302ec908c954de8177a134c.exe
-
Size
518KB
-
Sample
241121-bcb3bsxaja
-
MD5
ffad84e04ba8fe872106e8b49ebffb60
-
SHA1
ac406abbb6b44c912a85de53679fc07f6354d4d8
-
SHA256
b59ce70d9ac92e797f5ab44b86d96670e7e4cf46f302ec908c954de8177a134c
-
SHA512
e29484a68eac9341a1006ffb82ec2a381f5799f0beb542131578624cd0d8069c1c0c5d5c68cbce5c016f05e65a44b30731673bd487232ada4a7453f3c428dc4d
-
SSDEEP
3072:nhkZ1ccW0Cm4iQqgz95EKVPOFWc3Cm/0OWfAe63TYcoc+acg:nhkZPrl4iXgzgU2YZTjDDfad
Static task
static1
Behavioral task
behavioral1
Sample
b59ce70d9ac92e797f5ab44b86d96670e7e4cf46f302ec908c954de8177a134c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b59ce70d9ac92e797f5ab44b86d96670e7e4cf46f302ec908c954de8177a134c.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
141.94.188.138:46419
-
auth_value
3f48b95855158031ae9e7dafcb203009
Targets
-
-
Target
b59ce70d9ac92e797f5ab44b86d96670e7e4cf46f302ec908c954de8177a134c.exe
-
Size
518KB
-
MD5
ffad84e04ba8fe872106e8b49ebffb60
-
SHA1
ac406abbb6b44c912a85de53679fc07f6354d4d8
-
SHA256
b59ce70d9ac92e797f5ab44b86d96670e7e4cf46f302ec908c954de8177a134c
-
SHA512
e29484a68eac9341a1006ffb82ec2a381f5799f0beb542131578624cd0d8069c1c0c5d5c68cbce5c016f05e65a44b30731673bd487232ada4a7453f3c428dc4d
-
SSDEEP
3072:nhkZ1ccW0Cm4iQqgz95EKVPOFWc3Cm/0OWfAe63TYcoc+acg:nhkZPrl4iXgzgU2YZTjDDfad
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-