General
-
Target
1784-60-0x00000000009B0000-0x00000000009F4000-memory.dmp
-
Size
272KB
-
Sample
230213-y2rweafd21
-
MD5
40f77cb3bb51cb92e6ed1b15f141ba1f
-
SHA1
8ddba24daa369dd6e725de765b532200fe32fc72
-
SHA256
2a1c53f65d0dbb32019bdb2bccb0b1a0f30013e34985e268c6b322e95a1e8444
-
SHA512
350eb275263c951de93f24f0e49d40101bd93aac84ce890d0a05a585291deab698bea4c5082959a263b6b1034bef1f760e53db08c3ffc0c560d71f190bcdb63a
-
SSDEEP
3072:B6jNEL96TPqCuRwHMrtsPeVTesnnsB4zuMi1o40CAMBUhcznA9JQxNn2pU9f2MKg:B6jjGw6GPIemnUquMSUhgnA9sX/
Behavioral task
behavioral1
Sample
1784-60-0x00000000009B0000-0x00000000009F4000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1784-60-0x00000000009B0000-0x00000000009F4000-memory.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
redline
yarbaytom
20.100.204.23:41570
-
auth_value
d3d4e220daa221c3e8cc099b63412600
Targets
-
-
Target
1784-60-0x00000000009B0000-0x00000000009F4000-memory.dmp
-
Size
272KB
-
MD5
40f77cb3bb51cb92e6ed1b15f141ba1f
-
SHA1
8ddba24daa369dd6e725de765b532200fe32fc72
-
SHA256
2a1c53f65d0dbb32019bdb2bccb0b1a0f30013e34985e268c6b322e95a1e8444
-
SHA512
350eb275263c951de93f24f0e49d40101bd93aac84ce890d0a05a585291deab698bea4c5082959a263b6b1034bef1f760e53db08c3ffc0c560d71f190bcdb63a
-
SSDEEP
3072:B6jNEL96TPqCuRwHMrtsPeVTesnnsB4zuMi1o40CAMBUhcznA9JQxNn2pU9f2MKg:B6jjGw6GPIemnUquMSUhgnA9sX/
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-