General
- Target file.exe
- Size 460KB
- Sample221202-mtfbvsdd4t
- SHA256 58fd04fe003160c5aca2e839d8588bd86b9a2b3ddcd8e3ddd5616182e9d9c45f
- MD5 628f92d2f72e354115c37c23c371dfdf
- SHA1 b56ba706666fd6d2ed64a3d8ca062ee95c0c1343
- SHA512 76874d02452941bd55a1bbbca6d1328c97429029f76e35890fa11c51d4187acbbbb9dac1867c4dd2b11a24ffd1485460513d0b18376cedd406fc60a7e8edac0e
- SSDEEP 6144:EkNuTazUksHSAnL5GQpDKzv3XTWjfkz3SGPfppG16uLolTAoelLeyW:EeuTNklAnjVK7XTW4DSG3bGNKAFlLeyW
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20221111-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
Install
C2
-
manddarinn.art:81
Attributes
-
auth_value
f9affed97251c08e7a096257ba9edfb2
Targets
-
- Target file.exe
- Size 460KB
- SHA256 58fd04fe003160c5aca2e839d8588bd86b9a2b3ddcd8e3ddd5616182e9d9c45f
- MD5 628f92d2f72e354115c37c23c371dfdf
- SHA1 b56ba706666fd6d2ed64a3d8ca062ee95c0c1343
- SHA512 76874d02452941bd55a1bbbca6d1328c97429029f76e35890fa11c51d4187acbbbb9dac1867c4dd2b11a24ffd1485460513d0b18376cedd406fc60a7e8edac0e
- SSDEEP 6144:EkNuTazUksHSAnL5GQpDKzv3XTWjfkz3SGPfppG16uLolTAoelLeyW:EeuTNklAnjVK7XTW4DSG3bGNKAFlLeyW
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext