General
-
Target
Setup.exe
-
Size
7.2MB
-
Sample
250311-yypxmsvtax
-
MD5
691de5f672de4897dfbd2e54418dc587
-
SHA1
a63cb199ef02798caa326ed80412dc2ec0bed5ad
-
SHA256
ed1784d50e3da5daa8178094fcee1fa9c0e5509bf1e77d0acf6f1cf11dd44fff
-
SHA512
15d830e16e8a7bfedc1f94934bbeb44a21e8ae7a0e62daf7fbf6a5385aa69d9dba62113fa7ccfac916832fe1bdfda55a84358c1a01e3db03dc86175ed2be1a76
-
SSDEEP
98304:i8ZwIQDCfn6ujDo5XrTuE3/P23ULzv5ZaG4nQm+:i8ZwXDCftoBrTu++gzho4
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10ltsc2021-20250217-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11-20250217-en
Malware Config
Extracted
redline
1
193.233.132.32:38976
Targets
-
-
Target
Setup.exe
-
Size
7.2MB
-
MD5
691de5f672de4897dfbd2e54418dc587
-
SHA1
a63cb199ef02798caa326ed80412dc2ec0bed5ad
-
SHA256
ed1784d50e3da5daa8178094fcee1fa9c0e5509bf1e77d0acf6f1cf11dd44fff
-
SHA512
15d830e16e8a7bfedc1f94934bbeb44a21e8ae7a0e62daf7fbf6a5385aa69d9dba62113fa7ccfac916832fe1bdfda55a84358c1a01e3db03dc86175ed2be1a76
-
SSDEEP
98304:i8ZwIQDCfn6ujDo5XrTuE3/P23ULzv5ZaG4nQm+:i8ZwXDCftoBrTu++gzho4
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-