General
-
Target
980-87-0x0000000002360000-0x00000000023A4000-memory.dmp
-
Size
272KB
-
Sample
230215-k7vycsbb92
-
MD5
789d0fb17c26fcf74053bf3c9252618e
-
SHA1
71de4142dc323614bc3f1d2bddc83580985cebda
-
SHA256
8a773b3858405dc030ff7a53f63b3552631c9db3cdf30c3b516234598feda09b
-
SHA512
f7f4dc197328b92bb8c4ff3d13131f27ab76493f1adec77255b2b68f08257b2b22f0ff472c926862287c5d8473e85b677b782fd820c17697f0e508a8fe11e8de
-
SSDEEP
3072:B6jIELf6FDTCLkYxJw6qxYgcgpiiSo40jm8dAhTrnz5XD1NxNn2pU9f2MKTV/wiB:B6jodYx9cYKpzwAAh3nzq
Behavioral task
behavioral1
Sample
980-87-0x0000000002360000-0x00000000023A4000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
980-87-0x0000000002360000-0x00000000023A4000-memory.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
redline
ruma
193.233.20.13:4136
-
auth_value
647d00dfaba082a4a30f383bca5d1a2a
Targets
-
-
Target
980-87-0x0000000002360000-0x00000000023A4000-memory.dmp
-
Size
272KB
-
MD5
789d0fb17c26fcf74053bf3c9252618e
-
SHA1
71de4142dc323614bc3f1d2bddc83580985cebda
-
SHA256
8a773b3858405dc030ff7a53f63b3552631c9db3cdf30c3b516234598feda09b
-
SHA512
f7f4dc197328b92bb8c4ff3d13131f27ab76493f1adec77255b2b68f08257b2b22f0ff472c926862287c5d8473e85b677b782fd820c17697f0e508a8fe11e8de
-
SSDEEP
3072:B6jIELf6FDTCLkYxJw6qxYgcgpiiSo40jm8dAhTrnz5XD1NxNn2pU9f2MKTV/wiB:B6jodYx9cYKpzwAAh3nzq
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-