General
-
Target
d0493b8445b39746402fcad4e06e3850.exe
-
Size
277KB
-
Sample
220920-z1kw5saaap
-
MD5
d0493b8445b39746402fcad4e06e3850
-
SHA1
e28e7416bcc03a06dd290f20a0e71c9163439475
-
SHA256
c94d30cedc3657bce5ed5a06633cb83adf6b18f253c6ced01462d0a891dd4123
-
SHA512
0ff0edf8022868f074a3bdf4fc62cd631109c317d092415d5d62cc59e96bd0638901c8fee94ef1af6ceba0ffe08a1b092e6e60f3efdc087ab9dc8cfe845abe16
-
SSDEEP
3072:narha5Q82U+ZvkPK4Vm17IF9I1vj+x69Cogn4Zk/pBj2ZQcNVWvmXWBx8N9wKIr+:eHU+yPA1Z1C8TgnIk32aNu4X7iC
Static task
static1
Behavioral task
behavioral1
Sample
d0493b8445b39746402fcad4e06e3850.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d0493b8445b39746402fcad4e06e3850.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
redline
Test
46.18.107.225:6134
-
auth_value
670d22280e1d18e7a969eb0dd4e2f47c
Targets
-
-
Target
d0493b8445b39746402fcad4e06e3850.exe
-
Size
277KB
-
MD5
d0493b8445b39746402fcad4e06e3850
-
SHA1
e28e7416bcc03a06dd290f20a0e71c9163439475
-
SHA256
c94d30cedc3657bce5ed5a06633cb83adf6b18f253c6ced01462d0a891dd4123
-
SHA512
0ff0edf8022868f074a3bdf4fc62cd631109c317d092415d5d62cc59e96bd0638901c8fee94ef1af6ceba0ffe08a1b092e6e60f3efdc087ab9dc8cfe845abe16
-
SSDEEP
3072:narha5Q82U+ZvkPK4Vm17IF9I1vj+x69Cogn4Zk/pBj2ZQcNVWvmXWBx8N9wKIr+:eHU+yPA1Z1C8TgnIk32aNu4X7iC
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-