General
-
Target
08a881867b3ee139dd68ca76b9de83f4dfd3822b46fe88d273ef725362625462.exe
-
Size
4.6MB
-
Sample
241123-hz9ensxkcq
-
MD5
384657170752c53affcc11e751a57ee5
-
SHA1
13bea63d953032f277de287faa3ea70ae8ba13aa
-
SHA256
08a881867b3ee139dd68ca76b9de83f4dfd3822b46fe88d273ef725362625462
-
SHA512
3f343a49e0aa990e1b4bc8f0477581f507606d41066149e83aed5f30efca9a0c15edf5a984e3f0823204d19e5ef0fc3b5ba387ddf2083c576b53ec065fb1d021
-
SSDEEP
98304:LLYAOeGOR1UrfOMLFsIQhlFp7CNFHKNLBce/lLOscI5TDv:f7Ur/LufhlH7CNFqnXNLO7sTDv
Static task
static1
Behavioral task
behavioral1
Sample
08a881867b3ee139dd68ca76b9de83f4dfd3822b46fe88d273ef725362625462.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
08a881867b3ee139dd68ca76b9de83f4dfd3822b46fe88d273ef725362625462.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
@PUKPUKich
185.209.22.181:29234
-
auth_value
5a0918bd3e8ede8e02c8dd9d106a996d
Targets
-
-
Target
08a881867b3ee139dd68ca76b9de83f4dfd3822b46fe88d273ef725362625462.exe
-
Size
4.6MB
-
MD5
384657170752c53affcc11e751a57ee5
-
SHA1
13bea63d953032f277de287faa3ea70ae8ba13aa
-
SHA256
08a881867b3ee139dd68ca76b9de83f4dfd3822b46fe88d273ef725362625462
-
SHA512
3f343a49e0aa990e1b4bc8f0477581f507606d41066149e83aed5f30efca9a0c15edf5a984e3f0823204d19e5ef0fc3b5ba387ddf2083c576b53ec065fb1d021
-
SSDEEP
98304:LLYAOeGOR1UrfOMLFsIQhlFp7CNFHKNLBce/lLOscI5TDv:f7Ur/LufhlH7CNFqnXNLO7sTDv
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-