General
-
Target
641274abcd0a7e8ca2d5d1cee45c2bdd09554aa101d40b31921b75cae1fb69f8.exe
-
Size
390KB
-
Sample
241121-efngbaxhqg
-
MD5
67ac9c807f6cda0b5159d086f5dac43c
-
SHA1
26a5507dd29cd1b5e26c2351548e1664af4bbe22
-
SHA256
641274abcd0a7e8ca2d5d1cee45c2bdd09554aa101d40b31921b75cae1fb69f8
-
SHA512
c0a05784fed3989cafdea86418921ace116522548bc58d22056a6bf80c2a99a2568e11261dbf260dbf43456b8e280b971813122dc3674017a70f53c2249aa7ea
-
SSDEEP
12288:BQoTVgJpnBG5P5x4sMq8ZMeFrXy9rpdDEzBYDC+x:mTJHCf
Static task
static1
Behavioral task
behavioral1
Sample
641274abcd0a7e8ca2d5d1cee45c2bdd09554aa101d40b31921b75cae1fb69f8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
641274abcd0a7e8ca2d5d1cee45c2bdd09554aa101d40b31921b75cae1fb69f8.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
newtes33
kanerinasto.xyz:81
-
auth_value
11c4274dec83efea007b1dcb4478d075
Targets
-
-
Target
641274abcd0a7e8ca2d5d1cee45c2bdd09554aa101d40b31921b75cae1fb69f8.exe
-
Size
390KB
-
MD5
67ac9c807f6cda0b5159d086f5dac43c
-
SHA1
26a5507dd29cd1b5e26c2351548e1664af4bbe22
-
SHA256
641274abcd0a7e8ca2d5d1cee45c2bdd09554aa101d40b31921b75cae1fb69f8
-
SHA512
c0a05784fed3989cafdea86418921ace116522548bc58d22056a6bf80c2a99a2568e11261dbf260dbf43456b8e280b971813122dc3674017a70f53c2249aa7ea
-
SSDEEP
12288:BQoTVgJpnBG5P5x4sMq8ZMeFrXy9rpdDEzBYDC+x:mTJHCf
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-