General
-
Target
580-55-0x0000000002120000-0x0000000002164000-memory.dmp
-
Size
272KB
-
Sample
230201-jkmg2aec3w
-
MD5
fdac5daad4df6f4b41cf75c0f4d0442a
-
SHA1
62927c6915f09e3fc3e1db1f4847682097c16a6e
-
SHA256
b1097896ec1d6b04644f58a36c31a068cfddb10d4e197cd230b8bc9485aad456
-
SHA512
77f1264052038975901fbd396865d9b8a59c92ea1d9c58bbbf38ac18e02bc682a627ebfc630b77cb81745c3da69ed06bf494464655712e337c1ff6e2f980aa92
-
SSDEEP
3072:tT6jgELx6GNZCKN4dI0wKbroqlwZsmLoG3vXDCvgJo40DHw3hJPn/j2nwxNn2pUl:tT6jdJ4dI0hoqlwpLo4Y83hFn6
Behavioral task
behavioral1
Sample
580-55-0x0000000002120000-0x0000000002164000-memory.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
580-55-0x0000000002120000-0x0000000002164000-memory.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
redline
1
138.124.183.137:48862
-
auth_value
63347a605fdd4b113180332821529963
Targets
-
-
Target
580-55-0x0000000002120000-0x0000000002164000-memory.dmp
-
Size
272KB
-
MD5
fdac5daad4df6f4b41cf75c0f4d0442a
-
SHA1
62927c6915f09e3fc3e1db1f4847682097c16a6e
-
SHA256
b1097896ec1d6b04644f58a36c31a068cfddb10d4e197cd230b8bc9485aad456
-
SHA512
77f1264052038975901fbd396865d9b8a59c92ea1d9c58bbbf38ac18e02bc682a627ebfc630b77cb81745c3da69ed06bf494464655712e337c1ff6e2f980aa92
-
SSDEEP
3072:tT6jgELx6GNZCKN4dI0wKbroqlwZsmLoG3vXDCvgJo40DHw3hJPn/j2nwxNn2pUl:tT6jdJ4dI0hoqlwpLo4Y83hFn6
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-