Overview
overview
6Static
static
1RedlineSte...ne.ps1
windows7-x64
1RedlineSte...ne.ps1
windows10-2004-x64
1RedlineSte...ne.ps1
windows7-x64
1RedlineSte...ne.ps1
windows10-2004-x64
1RedlineSte...SCP.js
windows7-x64
1RedlineSte...SCP.js
windows10-2004-x64
6RedlineSte...per.js
windows7-x64
1RedlineSte...per.js
windows10-2004-x64
1RedlineSte...tor.js
windows7-x64
1RedlineSte...tor.js
windows10-2004-x64
1RedlineSte...er.vbs
windows7-x64
1RedlineSte...er.vbs
windows10-2004-x64
1RedlineSte...per.js
windows7-x64
1RedlineSte...per.js
windows10-2004-x64
1RedlineSte...ay.vbs
windows7-x64
1RedlineSte...ay.vbs
windows10-2004-x64
1RedlineSte...ct.vbs
windows7-x64
1RedlineSte...ct.vbs
windows10-2004-x64
1RedlineSte...ue.vbs
windows7-x64
1RedlineSte...ue.vbs
windows10-2004-x64
1RedlineSte...ger.js
windows7-x64
1RedlineSte...ger.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
RedlineStealer-main/Redline/Logic/Browsers/Chromium/ChromiumEngine.ps1
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
RedlineStealer-main/Redline/Logic/Browsers/Chromium/ChromiumEngine.ps1
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
RedlineStealer-main/Redline/Logic/Browsers/Gecko/GeckoEngine.ps1
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
RedlineStealer-main/Redline/Logic/Browsers/Gecko/GeckoEngine.ps1
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
RedlineStealer-main/Redline/Logic/FtpClients/WinSCP.js
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
RedlineStealer-main/Redline/Logic/FtpClients/WinSCP.js
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
RedlineStealer-main/Redline/Logic/Helpers/DecryptHelper.js
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
RedlineStealer-main/Redline/Logic/Helpers/DecryptHelper.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
RedlineStealer-main/Redline/Logic/Helpers/OsDetector.js
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
RedlineStealer-main/Redline/Logic/Helpers/OsDetector.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
RedlineStealer-main/Redline/Logic/Helpers/UacHelper.vbs
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
RedlineStealer-main/Redline/Logic/Helpers/UacHelper.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
RedlineStealer-main/Redline/Logic/Helpers/UserInfoHelper.js
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
RedlineStealer-main/Redline/Logic/Helpers/UserInfoHelper.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
RedlineStealer-main/Redline/Logic/Json/JsonArray.vbs
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
RedlineStealer-main/Redline/Logic/Json/JsonArray.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
RedlineStealer-main/Redline/Logic/Json/JsonObject.vbs
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
RedlineStealer-main/Redline/Logic/Json/JsonObject.vbs
Resource
win10v2004-20230221-en
Behavioral task
behavioral19
Sample
RedlineStealer-main/Redline/Logic/Json/JsonValue.vbs
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
RedlineStealer-main/Redline/Logic/Json/JsonValue.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
RedlineStealer-main/Redline/Logic/Others/InstallManager.js
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
RedlineStealer-main/Redline/Logic/Others/InstallManager.js
Resource
win10v2004-20230220-en
General
-
Target
RedlineStealer-main.zip
-
Size
108KB
-
MD5
1140ae507712cd651dd010b268b9104b
-
SHA1
f0a3f22f06c791c904931b5afdaaa8664115a506
-
SHA256
795a5b7535f6cd02c75c0d24ede6a45c56f51562972694deb95b88e74463b33c
-
SHA512
275d3a72310f7dc87f6e485f10327e49d9f4b05618c6461e13f87e9fd76add21e28972a1e717ee13a31c9abd100b195231b37fae131f585f67da6306e710b807
-
SSDEEP
1536:tbcasOs7NTVs02yMMbNVZGOaVSi+C1WgTMHBmGDRbySU4HlxHVZlX21hq9m:vfWNhnGFjWs+DRbf1lRpX21hb
Malware Config
Signatures
Files
-
RedlineStealer-main.zip.zip
-
RedlineStealer-main/AssemblyInfo.cs
-
RedlineStealer-main/Org/BouncyCastle/Crypto/CryptoException.cs
-
RedlineStealer-main/Org/BouncyCastle/Crypto/DataLengthException.cs
-
RedlineStealer-main/Org/BouncyCastle/Crypto/Engines/AesFastEngine.cs
-
RedlineStealer-main/Org/BouncyCastle/Crypto/IBlockCipher.cs
-
RedlineStealer-main/Org/BouncyCastle/Crypto/ICipherParameters.cs
-
RedlineStealer-main/Org/BouncyCastle/Crypto/InvalidCipherTextException.cs
-
RedlineStealer-main/Org/BouncyCastle/Crypto/Modes/Gcm/GcmUtilities.cs
-
RedlineStealer-main/Org/BouncyCastle/Crypto/Modes/Gcm/IGcmMultiplier.cs
-
RedlineStealer-main/Org/BouncyCastle/Crypto/Modes/Gcm/Tables8kGcmMultiplier.cs
-
RedlineStealer-main/Org/BouncyCastle/Crypto/Modes/GcmBlockCipher.cs
-
RedlineStealer-main/Org/BouncyCastle/Crypto/Modes/IAeadBlockCipher.cs
-
RedlineStealer-main/Org/BouncyCastle/Crypto/Parameters/AeadParameters.cs
-
RedlineStealer-main/Org/BouncyCastle/Crypto/Parameters/KeyParameter.cs
-
RedlineStealer-main/Org/BouncyCastle/Crypto/Parameters/ParametersWithIV.cs
-
RedlineStealer-main/Org/BouncyCastle/Crypto/Utilities/Pack.cs
-
RedlineStealer-main/Org/BouncyCastle/Utilities/Arrays.cs
-
RedlineStealer-main/README.md
-
RedlineStealer-main/RedLine.csproj
-
RedlineStealer-main/RedLine.sln
-
RedlineStealer-main/Redline/Client/Logic/Crypto/AesGcm256.cs
-
RedlineStealer-main/Redline/Client/Logic/Others/UserAgentDetector.cs
-
RedlineStealer-main/Redline/Client/Models/LocalState.cs
-
RedlineStealer-main/Redline/Client/Models/OsCrypt.cs
-
RedlineStealer-main/Redline/IRemotePanel.cs
-
RedlineStealer-main/Redline/Logic/Browsers/Chromium/ChromiumEngine.cs.ps1
-
RedlineStealer-main/Redline/Logic/Browsers/EdgeEngine.cs
-
RedlineStealer-main/Redline/Logic/Browsers/Gecko/Asn1Factory.cs
-
RedlineStealer-main/Redline/Logic/Browsers/Gecko/GeckoDatabase.cs
-
RedlineStealer-main/Redline/Logic/Browsers/Gecko/GeckoEngine.cs.ps1
-
RedlineStealer-main/Redline/Logic/Browsers/Gecko/GeckoPasswordBasedEncryption.cs
-
RedlineStealer-main/Redline/Logic/Extensions/Extensions.cs
-
RedlineStealer-main/Redline/Logic/Extensions/IsNullExtension.cs
-
RedlineStealer-main/Redline/Logic/Extensions/JsonExt.cs
-
RedlineStealer-main/Redline/Logic/FtpClients/FileZilla.cs
-
RedlineStealer-main/Redline/Logic/FtpClients/WinSCP.cs.js
-
RedlineStealer-main/Redline/Logic/Helpers/Constants.cs
-
RedlineStealer-main/Redline/Logic/Helpers/DecryptHelper.cs.js
-
RedlineStealer-main/Redline/Logic/Helpers/GeoHelper.cs
-
RedlineStealer-main/Redline/Logic/Helpers/LibInvoker.cs
-
RedlineStealer-main/Redline/Logic/Helpers/NativeMethods.cs
-
RedlineStealer-main/Redline/Logic/Helpers/OsDetector.cs.js
-
RedlineStealer-main/Redline/Logic/Helpers/TripleDESHelper.cs
-
RedlineStealer-main/Redline/Logic/Helpers/UacHelper.cs.vbs
-
RedlineStealer-main/Redline/Logic/Helpers/UserInfoHelper.cs.js
-
RedlineStealer-main/Redline/Logic/ImClient/Pidgin.cs
-
RedlineStealer-main/Redline/Logic/Json/JavaScriptReader.cs
-
RedlineStealer-main/Redline/Logic/Json/JsonArray.cs.vbs
-
RedlineStealer-main/Redline/Logic/Json/JsonObject.cs.vbs
-
RedlineStealer-main/Redline/Logic/Json/JsonPrimitive.cs
-
RedlineStealer-main/Redline/Logic/Json/JsonType.cs
-
RedlineStealer-main/Redline/Logic/Json/JsonValue.cs.vbs
-
RedlineStealer-main/Redline/Logic/Others/InstallManager.cs.js
-
RedlineStealer-main/Redline/Logic/Others/RemoteFileGrabber.cs
-
RedlineStealer-main/Redline/Logic/Others/VmDetector.cs
-
RedlineStealer-main/Redline/Logic/RunPE/LoadExecutor.cs
-
RedlineStealer-main/Redline/Logic/SQLite/DataEntry.cs
-
RedlineStealer-main/Redline/Logic/SQLite/SQLiteRow.cs
-
RedlineStealer-main/Redline/Logic/SQLite/SqlConnection.cs
-
RedlineStealer-main/Redline/Logic/SQLite/TypeSizes.cs
-
RedlineStealer-main/Redline/Models/Browsers/Autofill.cs
-
RedlineStealer-main/Redline/Models/Browsers/Browser.cs
-
RedlineStealer-main/Redline/Models/Browsers/Cookie.cs
-
RedlineStealer-main/Redline/Models/Browsers/CreditCard.cs
-
RedlineStealer-main/Redline/Models/Browsers/Edge/VAULT_ELEMENT_TYPE.cs
-
RedlineStealer-main/Redline/Models/Browsers/Edge/VAULT_ITEM_ELEMENT.cs
-
RedlineStealer-main/Redline/Models/Browsers/Edge/VAULT_ITEM_WIN7.cs
-
RedlineStealer-main/Redline/Models/Browsers/Edge/VAULT_ITEM_WIN8.cs
-
RedlineStealer-main/Redline/Models/Browsers/Edge/VAULT_SCHEMA_ELEMENT_ID.cs
-
RedlineStealer-main/Redline/Models/ClientSettings.cs
-
RedlineStealer-main/Redline/Models/Credentials.cs
-
RedlineStealer-main/Redline/Models/Gecko/Asn1Object.cs
-
RedlineStealer-main/Redline/Models/Gecko/Asn1Type.cs
-
RedlineStealer-main/Redline/Models/Gecko/GeckoLogin.cs
-
RedlineStealer-main/Redline/Models/Gecko/GeckoTable.cs
-
RedlineStealer-main/Redline/Models/Gecko/PasswordCheck.cs
-
RedlineStealer-main/Redline/Models/GeoInfo.cs
-
RedlineStealer-main/Redline/Models/Hardware.cs
-
RedlineStealer-main/Redline/Models/HardwareType.cs
-
RedlineStealer-main/Redline/Models/InstalledBrowserInfo.cs
-
RedlineStealer-main/Redline/Models/LoginPair.cs
-
RedlineStealer-main/Redline/Models/MachineType.cs
-
RedlineStealer-main/Redline/Models/ProtectionSettings.cs
-
RedlineStealer-main/Redline/Models/RemoteFile.cs
-
RedlineStealer-main/Redline/Models/RemoteTask.cs
-
RedlineStealer-main/Redline/Models/RemoteTaskAction.cs
-
RedlineStealer-main/Redline/Models/RunPE/CONTEXT.cs
-
RedlineStealer-main/Redline/Models/RunPE/IMAGE_DOS_HEADER.cs
-
RedlineStealer-main/Redline/Models/RunPE/IMAGE_FILE_HEADER.cs
-
RedlineStealer-main/Redline/Models/RunPE/IMAGE_NT_HEADERS.cs
-
RedlineStealer-main/Redline/Models/RunPE/IMAGE_OPTIONAL_HEADER.cs
-
RedlineStealer-main/Redline/Models/RunPE/IMAGE_SECTION_HEADER.cs
-
RedlineStealer-main/Redline/Models/RunPE/LoadParams.cs
-
RedlineStealer-main/Redline/Models/RunPE/NativeDelegates.cs
-
RedlineStealer-main/Redline/Models/RunPE/PROCESS_INFORMATION.cs
-
RedlineStealer-main/Redline/Models/RunPE/STARTUPINFO.cs
-
RedlineStealer-main/Redline/Models/UAC/AdminPromptType.cs
-
RedlineStealer-main/Redline/Models/UserLog.cs
-
RedlineStealer-main/Redline/Models/WMI/IWmiService.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiAntiSpyWareQuery.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiAntivirus.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiAntivirusQuery.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiBaseBoard.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiBaseBoardQuery.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiDiskDrive.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiDiskDriveQuery.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiFirewallQuery.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiGraphicCard.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiGraphicCardQuery.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiNetworkAdapter.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiNetworkAdapterQuery.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiNetworkAdapterType.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiProcess.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiProcessQuery.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiProcessor.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiProcessorQuery.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiQueryBase.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiResultAttribute.cs
-
RedlineStealer-main/Redline/Models/WMI/WmiService.cs
-
RedlineStealer-main/Redline/Program.cs
-
RedlineStealer-main/Redline/Service`1.cs