General
-
Target
launchеr-pс.zip
-
Size
30.0MB
-
Sample
241127-y4swgsvnan
-
MD5
7814873eb175159cdecb6c6276737e2e
-
SHA1
ed4fa5112d9092b654c0bc4639ede789f2071636
-
SHA256
d3f7cb3de3822efc9adac2b898bae8078bdea2806b97a02260c5f10a47647460
-
SHA512
b02604c9311ed85923bc6d53ad1dd9ec6c93a8c4600986156042c9d7fbce5517a8d4157aa779450f1b8ed67fb75dd34a697eddec09ee25bb641d8d53db132aa9
-
SSDEEP
786432:u3/cI91oBjJm7QaC6v72bQgVR6uNliUqMAV7sDpE8l5:u3kIL1RCiq0gnpNCVItz
Static task
static1
Behavioral task
behavioral1
Sample
launchеr-pс.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
launchеr-pс.zip
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
@miromistin0
94.142.138.4:80
-
auth_value
2ee380277e944675703ad248459af8c3
Targets
-
-
Target
launchеr-pс.zip
-
Size
30.0MB
-
MD5
7814873eb175159cdecb6c6276737e2e
-
SHA1
ed4fa5112d9092b654c0bc4639ede789f2071636
-
SHA256
d3f7cb3de3822efc9adac2b898bae8078bdea2806b97a02260c5f10a47647460
-
SHA512
b02604c9311ed85923bc6d53ad1dd9ec6c93a8c4600986156042c9d7fbce5517a8d4157aa779450f1b8ed67fb75dd34a697eddec09ee25bb641d8d53db132aa9
-
SSDEEP
786432:u3/cI91oBjJm7QaC6v72bQgVR6uNliUqMAV7sDpE8l5:u3kIL1RCiq0gnpNCVItz
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-