General
-
Target
51921d13908bd84b1c8fbdd77e6e29d4359ce0fc40857f6f0ad15b1b6ee74730
-
Size
248KB
-
Sample
241204-11dy9szjep
-
MD5
74b6b35627f6453d787f1c7ea3b9ec33
-
SHA1
a9282e204443fed6e0be28e8e2dfe7c927706428
-
SHA256
51921d13908bd84b1c8fbdd77e6e29d4359ce0fc40857f6f0ad15b1b6ee74730
-
SHA512
da3758d999b7a593987aa8e9d708b0b3215a442dc1f3470a81f3ddc221b7875d6c9ecb1c53fce5e7ee795a20e7267d21e8fac804089bb1b65e838c0ed9530996
-
SSDEEP
3072:W1jGFFPBsryKxPUBnIZ/C9FUYHwKLLgQmsbVVTjC3r7wcLl2byii5DzrIlu:ug3iPUZIAFUYHDPaQVXC3xR2/iNo
Static task
static1
Behavioral task
behavioral1
Sample
51921d13908bd84b1c8fbdd77e6e29d4359ce0fc40857f6f0ad15b1b6ee74730.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
51921d13908bd84b1c8fbdd77e6e29d4359ce0fc40857f6f0ad15b1b6ee74730.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
135.181.173.163:4323
-
auth_value
a909e2aaecf96137978fea4f86400b9b
Targets
-
-
Target
51921d13908bd84b1c8fbdd77e6e29d4359ce0fc40857f6f0ad15b1b6ee74730
-
Size
248KB
-
MD5
74b6b35627f6453d787f1c7ea3b9ec33
-
SHA1
a9282e204443fed6e0be28e8e2dfe7c927706428
-
SHA256
51921d13908bd84b1c8fbdd77e6e29d4359ce0fc40857f6f0ad15b1b6ee74730
-
SHA512
da3758d999b7a593987aa8e9d708b0b3215a442dc1f3470a81f3ddc221b7875d6c9ecb1c53fce5e7ee795a20e7267d21e8fac804089bb1b65e838c0ed9530996
-
SSDEEP
3072:W1jGFFPBsryKxPUBnIZ/C9FUYHwKLLgQmsbVVTjC3r7wcLl2byii5DzrIlu:ug3iPUZIAFUYHDPaQVXC3xR2/iNo
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-