General
-
Target
da295753d3fbca1691b189acf1d856cbb3af5f91f1ca4d4679f6c67366079481.exe
-
Size
744KB
-
Sample
250110-snkx2szrbp
-
MD5
b2f248a5956e162c72b57bd30299812a
-
SHA1
52be3af077d32b54f6a84dc77ca8d787a9b6be55
-
SHA256
da295753d3fbca1691b189acf1d856cbb3af5f91f1ca4d4679f6c67366079481
-
SHA512
7b7389dce19d3813b8b8676513ba004518a9624a3b7867c7e96ee8449cc7d1f3bcb42416eccb6ea73856679fb1ffe240ae42cab7f55c4fef31eb084083ebea63
-
SSDEEP
12288:uk9A55OHTDP7x2bBs0RJXqTIq/fEpBKNzSQVBpbeX7OrGp71H+m1RP7z0:NAXOP7xkbNqTIqfD9PVBpbZOkm1
Static task
static1
Behavioral task
behavioral1
Sample
da295753d3fbca1691b189acf1d856cbb3af5f91f1ca4d4679f6c67366079481.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da295753d3fbca1691b189acf1d856cbb3af5f91f1ca4d4679f6c67366079481.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
BOT
87.120.120.7:1912
Targets
-
-
Target
da295753d3fbca1691b189acf1d856cbb3af5f91f1ca4d4679f6c67366079481.exe
-
Size
744KB
-
MD5
b2f248a5956e162c72b57bd30299812a
-
SHA1
52be3af077d32b54f6a84dc77ca8d787a9b6be55
-
SHA256
da295753d3fbca1691b189acf1d856cbb3af5f91f1ca4d4679f6c67366079481
-
SHA512
7b7389dce19d3813b8b8676513ba004518a9624a3b7867c7e96ee8449cc7d1f3bcb42416eccb6ea73856679fb1ffe240ae42cab7f55c4fef31eb084083ebea63
-
SSDEEP
12288:uk9A55OHTDP7x2bBs0RJXqTIq/fEpBKNzSQVBpbeX7OrGp71H+m1RP7z0:NAXOP7xkbNqTIqfD9PVBpbZOkm1
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-