General
-
Target
1692-56-0x0000000004B00000-0x0000000004B58000-memory.dmp
-
Size
352KB
-
Sample
230328-jlczzsbe2x
-
MD5
6f64079e8ccc70d23f16af9d111a2414
-
SHA1
e3338d72806759341a72e95c2a900a33d5b208ef
-
SHA256
d96eb32f1c38f5dae7c3147af33f249f3ccad200298e42ab758ce3329120e5c0
-
SHA512
a4b51cb40ed279761fee4e95da44a24119e14e085b28aed03b536121a0f15402ae2fd0ddb7449b5eb9bb217726e9fb7132add1da1056d3ce004e9f6da2f2ae51
-
SSDEEP
3072:H4JS+yL3KN09yt41ScYumzdnnrsp04O4/eZJNfiALSrBdn5xkArN:kyLaN09y7cYumzt0yU3kA
Behavioral task
behavioral1
Sample
1692-56-0x0000000004B00000-0x0000000004B58000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1692-56-0x0000000004B00000-0x0000000004B58000-memory.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
ROBER
138.201.195.134:15564
-
auth_value
de311ede2b43457816afc0d9989c5255
Targets
-
-
Target
1692-56-0x0000000004B00000-0x0000000004B58000-memory.dmp
-
Size
352KB
-
MD5
6f64079e8ccc70d23f16af9d111a2414
-
SHA1
e3338d72806759341a72e95c2a900a33d5b208ef
-
SHA256
d96eb32f1c38f5dae7c3147af33f249f3ccad200298e42ab758ce3329120e5c0
-
SHA512
a4b51cb40ed279761fee4e95da44a24119e14e085b28aed03b536121a0f15402ae2fd0ddb7449b5eb9bb217726e9fb7132add1da1056d3ce004e9f6da2f2ae51
-
SSDEEP
3072:H4JS+yL3KN09yt41ScYumzdnnrsp04O4/eZJNfiALSrBdn5xkArN:kyLaN09y7cYumzt0yU3kA
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-