General
-
Target
BEC041D3484AACFB8322BF5C630280C0859796FF546337DF278899FC2326309D
-
Size
1.1MB
-
Sample
250103-jqjnbsxqen
-
MD5
b068dff30a78224c6d605d2e7722a9ad
-
SHA1
d03d04f392386993323f5560616d72fb63a0b184
-
SHA256
bec041d3484aacfb8322bf5c630280c0859796ff546337df278899fc2326309d
-
SHA512
68b946406d2cef5c35cff2a24c3a45c3031d4943a498bf185ccc819de1ed5e36e8e5398a7888744677903d2a0ea92ac0854e517e1102cf4139ab119071a0b286
-
SSDEEP
24576:j4lavt0LkLL9IMixoEgeatiZq8EJHKCquvJyq9MmCS:2kwkn9IMHeat+uHKlTaPCS
Static task
static1
Behavioral task
behavioral1
Sample
BEC041D3484AACFB8322BF5C630280C0859796FF546337DF278899FC2326309D.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
BEC041D3484AACFB8322BF5C630280C0859796FF546337DF278899FC2326309D.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
success
212.162.149.159:37004
Targets
-
-
Target
BEC041D3484AACFB8322BF5C630280C0859796FF546337DF278899FC2326309D
-
Size
1.1MB
-
MD5
b068dff30a78224c6d605d2e7722a9ad
-
SHA1
d03d04f392386993323f5560616d72fb63a0b184
-
SHA256
bec041d3484aacfb8322bf5c630280c0859796ff546337df278899fc2326309d
-
SHA512
68b946406d2cef5c35cff2a24c3a45c3031d4943a498bf185ccc819de1ed5e36e8e5398a7888744677903d2a0ea92ac0854e517e1102cf4139ab119071a0b286
-
SSDEEP
24576:j4lavt0LkLL9IMixoEgeatiZq8EJHKCquvJyq9MmCS:2kwkn9IMHeat+uHKlTaPCS
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-