General
-
Target
Setup.exe
-
Size
766KB
-
Sample
250112-3vrdhsvpgx
-
MD5
3a2edcc08db323bcb54a4b7dd3064c93
-
SHA1
40ee8e516f21720335e4e01e471471044a2f94ff
-
SHA256
c44b939c90c4a2532cf72c111ac8afd762661703a4e220f1c605bf71a66b2829
-
SHA512
040997f3b968a46920e9ef611a309eceadcb7e904be8f0ca94870213a5fbff4217c41820deee76062d3cc04b0a3643bb752c0b9bf7b1d53fd9c23914d4ecd4ad
-
SSDEEP
12288:9M21Of9dQUbkKevTfdEGDXicZ6SXntq6YQCtcKqrapU3Vg7cQ9oGa1ZFt:m2QvmtScZLW6aGVg4Qha17
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win11-20241007-en
Malware Config
Extracted
redline
45.15.157.131:36457
-
auth_value
0b1c7aa3f8d9eb1607fd8100272acb83
Targets
-
-
Target
Setup.exe
-
Size
766KB
-
MD5
3a2edcc08db323bcb54a4b7dd3064c93
-
SHA1
40ee8e516f21720335e4e01e471471044a2f94ff
-
SHA256
c44b939c90c4a2532cf72c111ac8afd762661703a4e220f1c605bf71a66b2829
-
SHA512
040997f3b968a46920e9ef611a309eceadcb7e904be8f0ca94870213a5fbff4217c41820deee76062d3cc04b0a3643bb752c0b9bf7b1d53fd9c23914d4ecd4ad
-
SSDEEP
12288:9M21Of9dQUbkKevTfdEGDXicZ6SXntq6YQCtcKqrapU3Vg7cQ9oGa1ZFt:m2QvmtScZLW6aGVg4Qha17
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-