General
-
Target
d8dca8c7a38d4270dc174ea97b08b68c4ca949da1d14369ebd9f4abbd6373dbc.zip
-
Size
47KB
-
Sample
230508-sjxq2sbc46
-
MD5
3cbd41d7bb80e22bb9e6716056c534d7
-
SHA1
62dc5152e41966bfb900373266709195fa6e0ed7
-
SHA256
486a650f41f555ff7b00d2adc0bed6896433304f85db4d889abf3d2fc22e6d55
-
SHA512
b81717def1b6e072af57034a33ad20816a423a2f482408a0c02d4020ad2240400e626a82c065c9768fbb4d6caeaa297fb6f9c2bf0a2e0fdabc66a6ae5c1808ab
-
SSDEEP
768:V2xONzjS112gjtr3ZUIl/OEtP6lltkgQj0iX0sWRaz8hG66GKifBZTqHMhix4SuV:Ho1Ptr3Z3/OEtP6100ikmz8RXKwBZm1g
Behavioral task
behavioral1
Sample
d8dca8c7a38d4270dc174ea97b08b68c4ca949da1d14369ebd9f4abbd6373dbc.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d8dca8c7a38d4270dc174ea97b08b68c4ca949da1d14369ebd9f4abbd6373dbc.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
redline
49.12.47.66:27973
-
auth_value
8bf66f13191598c73cd8cd8e010871b2
Targets
-
-
Target
d8dca8c7a38d4270dc174ea97b08b68c4ca949da1d14369ebd9f4abbd6373dbc
-
Size
106KB
-
MD5
b7e28e908205d80b3afcf1cfa18ee768
-
SHA1
da826631e490726dae784f592da43176d60b4bc3
-
SHA256
d8dca8c7a38d4270dc174ea97b08b68c4ca949da1d14369ebd9f4abbd6373dbc
-
SHA512
acc9f19100280f0173d8eed04dcd5970c48bdf684b6d11e88196f80e5975334d010ad63597c1c289ba054430abfd02975fe95cca78a735fe69fe46702f2736b5
-
SSDEEP
1536:gRxckCrfQ2IxAHcGhZPHPt98xrdUXcl2IFWyPfcHLBGcGwKbuZuwrslQ0wuei6C3:KCrfQAVbWdpfcHA/qwlQhY3
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-