General
-
Target
aa407ee5af619fcc76297a6d079b7fef95f316743c1082d1a743fe5f0fe6dbe7.exe
-
Size
4.6MB
-
Sample
241123-2fcfdawnfj
-
MD5
35411b29045c2446d768d312f376d6cb
-
SHA1
fe55a9f2a79f2bfc64746b946f37bc7b307755ee
-
SHA256
aa407ee5af619fcc76297a6d079b7fef95f316743c1082d1a743fe5f0fe6dbe7
-
SHA512
49ce68217e0b92c587096756dadeb4788d05291a9d4dfd9475f46c8bccae6a420818c2e3cc7d75fd8354d2b09920022d4c3ac6bb8be27037a63d2616ae678c17
-
SSDEEP
98304:VLE26zJVRMW9/Tp3iccQFY4SSi7oZDBnWn3hERvhflIGpN:nOVZ9z1FY4C7oZ9nWn3hufpN
Static task
static1
Behavioral task
behavioral1
Sample
aa407ee5af619fcc76297a6d079b7fef95f316743c1082d1a743fe5f0fe6dbe7.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
aa407ee5af619fcc76297a6d079b7fef95f316743c1082d1a743fe5f0fe6dbe7.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
1203690446
94.26.248.120:63731
-
auth_value
ee8187fd574be73a935e073f8b5705eb
Targets
-
-
Target
aa407ee5af619fcc76297a6d079b7fef95f316743c1082d1a743fe5f0fe6dbe7.exe
-
Size
4.6MB
-
MD5
35411b29045c2446d768d312f376d6cb
-
SHA1
fe55a9f2a79f2bfc64746b946f37bc7b307755ee
-
SHA256
aa407ee5af619fcc76297a6d079b7fef95f316743c1082d1a743fe5f0fe6dbe7
-
SHA512
49ce68217e0b92c587096756dadeb4788d05291a9d4dfd9475f46c8bccae6a420818c2e3cc7d75fd8354d2b09920022d4c3ac6bb8be27037a63d2616ae678c17
-
SSDEEP
98304:VLE26zJVRMW9/Tp3iccQFY4SSi7oZDBnWn3hERvhflIGpN:nOVZ9z1FY4C7oZ9nWn3hufpN
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-