General
-
Target
b7a46b6c3fd98866134d8a5831a82b7444c0c2d5fe6692adfab92051e3541c7f
-
Size
396KB
-
Sample
241201-yexs5svjfl
-
MD5
8c3e7b6b72018052253153eeac5d10a2
-
SHA1
e71b4799ace996616f042f3ee5d6d32418f8c687
-
SHA256
b7a46b6c3fd98866134d8a5831a82b7444c0c2d5fe6692adfab92051e3541c7f
-
SHA512
b0d48769f4db4eb4db9c5302ed6fc753cca5b0fa4f88e55345077a92092b8af71e92ce5d69608d05cc4cbf9ee566661035314ae0df9fd18332ab9df6f3c479da
-
SSDEEP
6144:vK4zpQJTuer7D8PX6Jzgw61RKjWMw376FZKWAlBCqf670vb06WgGZqb5loqQr:vPXuD8PX261RKuc4UqfwD6zMqU
Static task
static1
Behavioral task
behavioral1
Sample
b7a46b6c3fd98866134d8a5831a82b7444c0c2d5fe6692adfab92051e3541c7f.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
b7a46b6c3fd98866134d8a5831a82b7444c0c2d5fe6692adfab92051e3541c7f.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
work28.7
194.33.191.102:21751
Targets
-
-
Target
b7a46b6c3fd98866134d8a5831a82b7444c0c2d5fe6692adfab92051e3541c7f
-
Size
396KB
-
MD5
8c3e7b6b72018052253153eeac5d10a2
-
SHA1
e71b4799ace996616f042f3ee5d6d32418f8c687
-
SHA256
b7a46b6c3fd98866134d8a5831a82b7444c0c2d5fe6692adfab92051e3541c7f
-
SHA512
b0d48769f4db4eb4db9c5302ed6fc753cca5b0fa4f88e55345077a92092b8af71e92ce5d69608d05cc4cbf9ee566661035314ae0df9fd18332ab9df6f3c479da
-
SSDEEP
6144:vK4zpQJTuer7D8PX6Jzgw61RKjWMw376FZKWAlBCqf670vb06WgGZqb5loqQr:vPXuD8PX261RKuc4UqfwD6zMqU
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-