General
-
Target
719a05d98e81277de61beb8541ac5642a84df53c08ac00adf10957093df7ce6d.exe
-
Size
516KB
-
Sample
241122-l3bvcsvkbq
-
MD5
2a288d02e31905e6a46c28150839d68f
-
SHA1
2d5e4fd9699e8906f8fb03b882e1df4bcc2f97b2
-
SHA256
719a05d98e81277de61beb8541ac5642a84df53c08ac00adf10957093df7ce6d
-
SHA512
b45394b348e7af94f524c5e517a1cac6ccd77deb6dfbd5415449729611a6346f5b9e100e914304c661187a12bf195d0fab8b60b1c03b9443d7a1457715a8c7d4
-
SSDEEP
3072:nO8ccmPptXdaWA5hK7BnNhPsCa3C/SOW1RfKACUSr0IpI:nOXc6tkW0K1nnMC6nRfKACUa0IG
Static task
static1
Behavioral task
behavioral1
Sample
719a05d98e81277de61beb8541ac5642a84df53c08ac00adf10957093df7ce6d.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
719a05d98e81277de61beb8541ac5642a84df53c08ac00adf10957093df7ce6d.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
141.94.188.138:46419
-
auth_value
3f48b95855158031ae9e7dafcb203009
Targets
-
-
Target
719a05d98e81277de61beb8541ac5642a84df53c08ac00adf10957093df7ce6d.exe
-
Size
516KB
-
MD5
2a288d02e31905e6a46c28150839d68f
-
SHA1
2d5e4fd9699e8906f8fb03b882e1df4bcc2f97b2
-
SHA256
719a05d98e81277de61beb8541ac5642a84df53c08ac00adf10957093df7ce6d
-
SHA512
b45394b348e7af94f524c5e517a1cac6ccd77deb6dfbd5415449729611a6346f5b9e100e914304c661187a12bf195d0fab8b60b1c03b9443d7a1457715a8c7d4
-
SSDEEP
3072:nO8ccmPptXdaWA5hK7BnNhPsCa3C/SOW1RfKACUSr0IpI:nOXc6tkW0K1nnMC6nRfKACUa0IG
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-