General
-
Target
093a9f62abe2110024a18f646a2824321543e7b49d6378f93cb977a12b7d5a2c.exe
-
Size
4.5MB
-
Sample
241121-mv9l4awkfl
-
MD5
bad3859e7cf2a0cbf3928b542bf67fd1
-
SHA1
af2966a18c1dcf450897566db24eadda6e08a25b
-
SHA256
093a9f62abe2110024a18f646a2824321543e7b49d6378f93cb977a12b7d5a2c
-
SHA512
778652bd26b722aade171f38536a3e983a24eca8b5b0c1af35835aa70d853e871c6949e29e4bf8a6ada93c9d6705725ff48f407c62acf16a9252606763d4b75d
-
SSDEEP
98304:TL6ZnmR/d9dPavLzls0SbsQKUN+YQPVfSqkOUs2gO8vGW2F3tG:gnmraDziH1FQfSqkOJduz+
Static task
static1
Behavioral task
behavioral1
Sample
093a9f62abe2110024a18f646a2824321543e7b49d6378f93cb977a12b7d5a2c.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
093a9f62abe2110024a18f646a2824321543e7b49d6378f93cb977a12b7d5a2c.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
rich
185.238.169.158:7765
-
auth_value
60ec0c9678621becd603caa1ce0c1314
Targets
-
-
Target
093a9f62abe2110024a18f646a2824321543e7b49d6378f93cb977a12b7d5a2c.exe
-
Size
4.5MB
-
MD5
bad3859e7cf2a0cbf3928b542bf67fd1
-
SHA1
af2966a18c1dcf450897566db24eadda6e08a25b
-
SHA256
093a9f62abe2110024a18f646a2824321543e7b49d6378f93cb977a12b7d5a2c
-
SHA512
778652bd26b722aade171f38536a3e983a24eca8b5b0c1af35835aa70d853e871c6949e29e4bf8a6ada93c9d6705725ff48f407c62acf16a9252606763d4b75d
-
SSDEEP
98304:TL6ZnmR/d9dPavLzls0SbsQKUN+YQPVfSqkOUs2gO8vGW2F3tG:gnmraDziH1FQfSqkOJduz+
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-