General
-
Target
8d989a16837d23dd2fd12b69b133e43c2ae_JC.exe
-
Size
402KB
-
Sample
230730-q4qgcshd75
-
MD5
d3b365c476231331bf9c0c16600c0b20
-
SHA1
9f32eaaf2526f2ecf629b66988dca998ad1a7ae8
-
SHA256
8d989a16837d23dd2fd12b69b133e43c2ae1bbb68b171736a75dd9af898b00a5
-
SHA512
0e6315b17e05518eb4d8ea1e2b866f53b607be5feb6af603775b152c9d4727d0ad05e1830197a070626f0db11aa3153214ffebf4b39356a47020b6283a38c8e1
-
SSDEEP
6144:HB2IN8LJ9AuBYBVis5Kdqsn8/lyITHQeHv1KYUm+v:HEIN8l9wViWvsM8Ojv8hv
Static task
static1
Behavioral task
behavioral1
Sample
8d989a16837d23dd2fd12b69b133e43c2ae_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8d989a16837d23dd2fd12b69b133e43c2ae_JC.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
redline
@Germany
194.26.135.162:2920
-
auth_value
9d15d78194367a949e54a07d6ce02c62
Targets
-
-
Target
8d989a16837d23dd2fd12b69b133e43c2ae_JC.exe
-
Size
402KB
-
MD5
d3b365c476231331bf9c0c16600c0b20
-
SHA1
9f32eaaf2526f2ecf629b66988dca998ad1a7ae8
-
SHA256
8d989a16837d23dd2fd12b69b133e43c2ae1bbb68b171736a75dd9af898b00a5
-
SHA512
0e6315b17e05518eb4d8ea1e2b866f53b607be5feb6af603775b152c9d4727d0ad05e1830197a070626f0db11aa3153214ffebf4b39356a47020b6283a38c8e1
-
SSDEEP
6144:HB2IN8LJ9AuBYBVis5Kdqsn8/lyITHQeHv1KYUm+v:HEIN8l9wViWvsM8Ojv8hv
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-