General
-
Target
2d38fac7d02a4d32b8579c25ec1ce2d6bb14bc27d846874ad6f1897ca21889cd.exe
-
Size
770KB
-
Sample
250111-c9affasnhr
-
MD5
8b2612c44a0951e150dc47ba2741d26e
-
SHA1
0d5a4030a841a8a77c130f6689712e24aaa9a674
-
SHA256
2d38fac7d02a4d32b8579c25ec1ce2d6bb14bc27d846874ad6f1897ca21889cd
-
SHA512
87052019e30f961c6a77889e789f246d1c529834c90122f3c3a781ee58b519db311b31f36309ae2e56706ccc2a0e34b545ddb054d9fc5cf81700e1c76510387e
-
SSDEEP
12288:uIR4R52J+XtLKxw9rbrramF93MFTzEiBBs/iTxAKnAHORfoO9FHF9jD7Qx1MxQh:uIeew9rbKmF93MxzRTqKnYOBvHPO
Static task
static1
Behavioral task
behavioral1
Sample
2d38fac7d02a4d32b8579c25ec1ce2d6bb14bc27d846874ad6f1897ca21889cd.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d38fac7d02a4d32b8579c25ec1ce2d6bb14bc27d846874ad6f1897ca21889cd.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
LOGS
87.120.120.86:1912
Targets
-
-
Target
2d38fac7d02a4d32b8579c25ec1ce2d6bb14bc27d846874ad6f1897ca21889cd.exe
-
Size
770KB
-
MD5
8b2612c44a0951e150dc47ba2741d26e
-
SHA1
0d5a4030a841a8a77c130f6689712e24aaa9a674
-
SHA256
2d38fac7d02a4d32b8579c25ec1ce2d6bb14bc27d846874ad6f1897ca21889cd
-
SHA512
87052019e30f961c6a77889e789f246d1c529834c90122f3c3a781ee58b519db311b31f36309ae2e56706ccc2a0e34b545ddb054d9fc5cf81700e1c76510387e
-
SSDEEP
12288:uIR4R52J+XtLKxw9rbrramF93MFTzEiBBs/iTxAKnAHORfoO9FHF9jD7Qx1MxQh:uIeew9rbKmF93MxzRTqKnYOBvHPO
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-