General
-
Target
https://bit.ly/3pt0Mav
-
Sample
250203-cmj2csykap
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://bit.ly/3pt0Mav
Resource
win11-20241007-en
20 signatures
300 seconds
Malware Config
Extracted
Family
redline
C2
185.223.92.157:44160
Attributes
-
auth_value
4e5c6e2ba7063e715c19d342d7f1bcc9
Targets
-
-
Target
https://bit.ly/3pt0Mav
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Redline family
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Executes dropped EXE
-
Checks whether UAC is enabled
-