General
-
Target
3656-192-0x00000000024A0000-0x00000000024DE000-memory.dmp
-
Size
248KB
-
Sample
230309-pa62kscc39
-
MD5
74e2e52c7a7fd1145e9e97a204277a4f
-
SHA1
46b95b99bd59b1444001e1701b8b3c13ff296c1d
-
SHA256
5f3e7b65a913ea6a7ffa6ed005fbf00aa4ebe26d29c92dd209d95151c3892467
-
SHA512
412d0f8e4ed26aad98106ec6f83a386dd626f2b8efef418a92e8322eaa396a6fcef64fc8e1f3cd8a98840807063564bec86de51008675b1baf5ce526f6f39f38
-
SSDEEP
3072:W6j4ELN6FY9Cff3n0sk+wziR/o40DrNwAhFMnImax8EExNn2pU9f2MKTV/wi4lrO:W6jiD30sk+wzYZAhunI7x8
Behavioral task
behavioral1
Sample
3656-192-0x00000000024A0000-0x00000000024DE000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3656-192-0x00000000024A0000-0x00000000024DE000-memory.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
mango
193.233.20.28:4125
-
auth_value
ecf79d7f5227d998a3501c972d915d23
Targets
-
-
Target
3656-192-0x00000000024A0000-0x00000000024DE000-memory.dmp
-
Size
248KB
-
MD5
74e2e52c7a7fd1145e9e97a204277a4f
-
SHA1
46b95b99bd59b1444001e1701b8b3c13ff296c1d
-
SHA256
5f3e7b65a913ea6a7ffa6ed005fbf00aa4ebe26d29c92dd209d95151c3892467
-
SHA512
412d0f8e4ed26aad98106ec6f83a386dd626f2b8efef418a92e8322eaa396a6fcef64fc8e1f3cd8a98840807063564bec86de51008675b1baf5ce526f6f39f38
-
SSDEEP
3072:W6j4ELN6FY9Cff3n0sk+wziR/o40DrNwAhFMnImax8EExNn2pU9f2MKTV/wi4lrO:W6jiD30sk+wzYZAhunI7x8
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-