General
-
Target
bc991d55928dba6981fe1e4e713da7795c25770a509246e21fee731bb61ed645.exe
-
Size
519KB
-
Sample
241123-bqwnwszpdm
-
MD5
f2435fb8c6799acda1a98607f7381892
-
SHA1
2c69c958f64b8c4a69ecf189b4ce0ef81cd7942e
-
SHA256
bc991d55928dba6981fe1e4e713da7795c25770a509246e21fee731bb61ed645
-
SHA512
94d09b12fa9f8bb04e952be4789d10c5c33def690268c35190dbd8853c0f337e77efaba7997221a918388bb2356118cc6f0399636464e9215a4e426a47867b7c
-
SSDEEP
3072:vpJWJ1sMOjAv4FYh4r+XMV7DXTS74Q2QKsTLx6oimhCS0kJUZVGt5:vpJWJuMD4FYhM+cXTS2QKsnx6WjaVGf
Static task
static1
Behavioral task
behavioral1
Sample
bc991d55928dba6981fe1e4e713da7795c25770a509246e21fee731bb61ed645.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
bc991d55928dba6981fe1e4e713da7795c25770a509246e21fee731bb61ed645.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
141.94.188.138:46419
-
auth_value
3f48b95855158031ae9e7dafcb203009
Targets
-
-
Target
bc991d55928dba6981fe1e4e713da7795c25770a509246e21fee731bb61ed645.exe
-
Size
519KB
-
MD5
f2435fb8c6799acda1a98607f7381892
-
SHA1
2c69c958f64b8c4a69ecf189b4ce0ef81cd7942e
-
SHA256
bc991d55928dba6981fe1e4e713da7795c25770a509246e21fee731bb61ed645
-
SHA512
94d09b12fa9f8bb04e952be4789d10c5c33def690268c35190dbd8853c0f337e77efaba7997221a918388bb2356118cc6f0399636464e9215a4e426a47867b7c
-
SSDEEP
3072:vpJWJ1sMOjAv4FYh4r+XMV7DXTS74Q2QKsTLx6oimhCS0kJUZVGt5:vpJWJuMD4FYhM+cXTS2QKsnx6WjaVGf
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-