General
-
Target
1116-107-0x00000000021D0000-0x0000000002214000-memory.dmp
-
Size
272KB
-
Sample
230214-jl5p1abg63
-
MD5
c05c21c70a5b0d90503f3ce8157cee76
-
SHA1
ed6a8ef468580e91603d13b28f2c9c9a49b8fe56
-
SHA256
3e7b8e54f863fd01b899e0a6367956849d776b406d9ae0e5d829682c1cdfb8c4
-
SHA512
d21906c2bb9b6305e66010cb6571b1c05bdb965c586569a60cf69f9a29556382c9b3dc0822fec41605d929e3128cd9493f73769b23e9144c52dd0ba8f519d881
-
SSDEEP
3072:p6j4ELH6Vt7CENpmh6sLKR+utY/edHbpiWo40mTJghm0nlQoYKgQmExNn2pU9f2O:p6jgppZsLKwuAexbpZghdnlQH5Q
Behavioral task
behavioral1
Sample
1116-107-0x00000000021D0000-0x0000000002214000-memory.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1116-107-0x00000000021D0000-0x0000000002214000-memory.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
redline
romik
193.233.20.12:4132
-
auth_value
8fb78d2889ba0ca42678b59b884e88ff
Targets
-
-
Target
1116-107-0x00000000021D0000-0x0000000002214000-memory.dmp
-
Size
272KB
-
MD5
c05c21c70a5b0d90503f3ce8157cee76
-
SHA1
ed6a8ef468580e91603d13b28f2c9c9a49b8fe56
-
SHA256
3e7b8e54f863fd01b899e0a6367956849d776b406d9ae0e5d829682c1cdfb8c4
-
SHA512
d21906c2bb9b6305e66010cb6571b1c05bdb965c586569a60cf69f9a29556382c9b3dc0822fec41605d929e3128cd9493f73769b23e9144c52dd0ba8f519d881
-
SSDEEP
3072:p6j4ELH6Vt7CENpmh6sLKR+utY/edHbpiWo40mTJghm0nlQoYKgQmExNn2pU9f2O:p6jgppZsLKwuAexbpZghdnlQH5Q
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-