General
-
Target
0766e43d3968a048e78c18383353ea6450934bcd0427ec9757c8da2570884580.exe
-
Size
826KB
-
Sample
250110-r789baxnbv
-
MD5
223342da9548abad8b253b0918baffd1
-
SHA1
9d1dfe8772a94721f3aaeef0077dd867987973f9
-
SHA256
0766e43d3968a048e78c18383353ea6450934bcd0427ec9757c8da2570884580
-
SHA512
e655ffeb9b63bbab56b8bd7246fe6ace7e4235e86950c8a673340ad2ab99d841b75328671a6f314e63d5b181f8b38870fb6a6e5d9ae28a6d3fe6e0c9a01c0289
-
SSDEEP
12288:C88f2uE1zDYj657DjU2HAu4TjYMJ5Q0PepO/lJhaFv3Ji6L8cUK:C8u2uOC6pDjU2HAu6YGQ3wJhwvxPU
Static task
static1
Behavioral task
behavioral1
Sample
0766e43d3968a048e78c18383353ea6450934bcd0427ec9757c8da2570884580.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0766e43d3968a048e78c18383353ea6450934bcd0427ec9757c8da2570884580.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
LOGS
87.120.120.86:1912
Targets
-
-
Target
0766e43d3968a048e78c18383353ea6450934bcd0427ec9757c8da2570884580.exe
-
Size
826KB
-
MD5
223342da9548abad8b253b0918baffd1
-
SHA1
9d1dfe8772a94721f3aaeef0077dd867987973f9
-
SHA256
0766e43d3968a048e78c18383353ea6450934bcd0427ec9757c8da2570884580
-
SHA512
e655ffeb9b63bbab56b8bd7246fe6ace7e4235e86950c8a673340ad2ab99d841b75328671a6f314e63d5b181f8b38870fb6a6e5d9ae28a6d3fe6e0c9a01c0289
-
SSDEEP
12288:C88f2uE1zDYj657DjU2HAu4TjYMJ5Q0PepO/lJhaFv3Ji6L8cUK:C8u2uOC6pDjU2HAu6YGQ3wJhwvxPU
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-