General
-
Target
9cda3093dddacbd05e0e9c8ce7320c73320ff2ea4b66ca3578b5b4fd9dc80fe2.zip
-
Size
254KB
-
Sample
230308-psrplsgd28
-
MD5
21c988400b0704bdf68a6df59c96db22
-
SHA1
9c66722aae79d51c168b453da62632f1e4083b1d
-
SHA256
55c8e9fccdfa109861cc90ea5b6c8af20c8d3436bb61a18b4796aa0aa50d2467
-
SHA512
0ee17ad5d6e31f0993e940c470e945fc1f49436f63eb85d262bbe9119c8c1edc1f1222b3f8fd50618bdedfeb07880a468fed6cf5e2490e1a3d5f9ce54de28853
-
SSDEEP
6144:nM8Ebee9TFVCIflBoBVH9q5CyOFgIkm6SCpCYPk+o7PGCbVmZ:5T8Lj4dq09km6SCsY8+gGCJmZ
Static task
static1
Behavioral task
behavioral1
Sample
9cda3093dddacbd05e0e9c8ce7320c73320ff2ea4b66ca3578b5b4fd9dc80fe2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9cda3093dddacbd05e0e9c8ce7320c73320ff2ea4b66ca3578b5b4fd9dc80fe2.exe
Resource
win10v2004-20230221-en
Malware Config
Extracted
redline
fud
193.233.20.27:4123
-
auth_value
cddc991efd6918ad5321d80dac884b40
Targets
-
-
Target
9cda3093dddacbd05e0e9c8ce7320c73320ff2ea4b66ca3578b5b4fd9dc80fe2.exe
-
Size
365KB
-
MD5
69fb73e283630210dcb0e9b400a1ee4c
-
SHA1
f746b5f15ebf476579d0705720ab4daec3306e41
-
SHA256
9cda3093dddacbd05e0e9c8ce7320c73320ff2ea4b66ca3578b5b4fd9dc80fe2
-
SHA512
ee9062a2b4a2ece85c000e369dd1bc1815ce159c87235cba0e36e7a26f7548c28d4c6dfe9a10b22addbe7b1f8c2cd9972446925a5e57fa0644d9c617cda1784f
-
SSDEEP
6144:YY0L64nRBgQZ50kxyZCQj4pPIuVBNX++ZbE8GqcdPQrixxAAY4eZu:YY0O4RBgQwsyZj4pPlxu+ZQ8id4rixxH
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-