General
-
Target
2b5ceb18f10606859253493d936ae2815b3fed26.exe
-
Size
647KB
-
Sample
241231-rbjzjstlby
-
MD5
ac39e7b10284fe04e5bdb8b588681cb4
-
SHA1
2b5ceb18f10606859253493d936ae2815b3fed26
-
SHA256
fc7da967f86d24024700aa2a488ae2ce18c038260d9e2d5067261c9bedbcfaf0
-
SHA512
0fbff528fe6962f4695be585e8a666af8d4576d75cf37d20e95658e7b1d81bebc0e308b7c4032be139768b077b08e19ed9d474d04a87c0609bac04258ccde809
-
SSDEEP
12288:tHQNnEONUb9/6VQBDthHcUzsMyl2zkoF:tqnEldUUfyl2z
Behavioral task
behavioral1
Sample
2b5ceb18f10606859253493d936ae2815b3fed26.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2b5ceb18f10606859253493d936ae2815b3fed26.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
185.38.142.167:6302
Targets
-
-
Target
2b5ceb18f10606859253493d936ae2815b3fed26.exe
-
Size
647KB
-
MD5
ac39e7b10284fe04e5bdb8b588681cb4
-
SHA1
2b5ceb18f10606859253493d936ae2815b3fed26
-
SHA256
fc7da967f86d24024700aa2a488ae2ce18c038260d9e2d5067261c9bedbcfaf0
-
SHA512
0fbff528fe6962f4695be585e8a666af8d4576d75cf37d20e95658e7b1d81bebc0e308b7c4032be139768b077b08e19ed9d474d04a87c0609bac04258ccde809
-
SSDEEP
12288:tHQNnEONUb9/6VQBDthHcUzsMyl2zkoF:tqnEldUUfyl2z
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-