General
-
Target
1376-59-0x0000000002200000-0x000000000223C000-memory.dmp
-
Size
240KB
-
Sample
221028-jnshfsfdaj
-
MD5
3b10241ce9016311733b35d0a539f589
-
SHA1
ba8cca9826753e83442d27269f54f40cd34f211d
-
SHA256
4a2f42d5767cff94f4ef60a8e709d970e85ae2fed4dd0752738fdcce54cf0a40
-
SHA512
d47c4fbfc75425b972764acc3746f5206616f6f8be8e672a47a26130a351c6a62383477411ed0bc83e41956368676a07c824d5cdcaff7af5f7fe235d6da0789f
-
SSDEEP
3072:54jqrLQenQRonR7aQS7yaTKrYTSdzpqF8H5Ldoe/9GdRshkJO7SlFfYBYQozQt:54jq3Go4X7fTSdzpq+HEshpSU+
Behavioral task
behavioral1
Sample
1376-59-0x0000000002200000-0x000000000223C000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1376-59-0x0000000002200000-0x000000000223C000-memory.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
redline
14
92.118.36.245:21100
-
auth_value
c509bb736d90e24a5f10c696dd374e6d
Targets
-
-
Target
1376-59-0x0000000002200000-0x000000000223C000-memory.dmp
-
Size
240KB
-
MD5
3b10241ce9016311733b35d0a539f589
-
SHA1
ba8cca9826753e83442d27269f54f40cd34f211d
-
SHA256
4a2f42d5767cff94f4ef60a8e709d970e85ae2fed4dd0752738fdcce54cf0a40
-
SHA512
d47c4fbfc75425b972764acc3746f5206616f6f8be8e672a47a26130a351c6a62383477411ed0bc83e41956368676a07c824d5cdcaff7af5f7fe235d6da0789f
-
SSDEEP
3072:54jqrLQenQRonR7aQS7yaTKrYTSdzpqF8H5Ldoe/9GdRshkJO7SlFfYBYQozQt:54jq3Go4X7fTSdzpq+HEshpSU+
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-