General
-
Target
Hades Cracked.exe
-
Size
875KB
-
Sample
250111-z172nszlbt
-
MD5
73e6fc33b22c5a652a5f8c3dd552f6d5
-
SHA1
2a832329552c9e97712831f5f4be84bccb66bee3
-
SHA256
e4cba65aa92d8f4e8f799ca810073c7762b73da0249cf7d6898b82ff5d7bcca8
-
SHA512
fb578f6984a78c76cde919ef18fc8abf4ef565c0e0ba506114af8f0e17b23671bccd5a6f4bc2616114f207daf73bcbbea8a1a9fe0d28561b77d64c4a447db6ed
-
SSDEEP
24576:JAd/L/gfY98+FwZpl2qN/BnwI5KO4SUC:Wd/fKgSGq/hxx
Static task
static1
Behavioral task
behavioral1
Sample
Hades Cracked.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
SpotifyChecker2
172.205.128.102:1912
Targets
-
-
Target
Hades Cracked.exe
-
Size
875KB
-
MD5
73e6fc33b22c5a652a5f8c3dd552f6d5
-
SHA1
2a832329552c9e97712831f5f4be84bccb66bee3
-
SHA256
e4cba65aa92d8f4e8f799ca810073c7762b73da0249cf7d6898b82ff5d7bcca8
-
SHA512
fb578f6984a78c76cde919ef18fc8abf4ef565c0e0ba506114af8f0e17b23671bccd5a6f4bc2616114f207daf73bcbbea8a1a9fe0d28561b77d64c4a447db6ed
-
SSDEEP
24576:JAd/L/gfY98+FwZpl2qN/BnwI5KO4SUC:Wd/fKgSGq/hxx
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-