General
-
Target
h0416391.exe
-
Size
174KB
-
Sample
231004-hzs3pahh3w
-
MD5
3490d47f19fe14d322491487ce1b68e5
-
SHA1
8d81acd2e36d9cfe88a7a96df81401d9d2d65fc4
-
SHA256
64989754f83d4a28bec55ab7663f3b347b8c11a6175a5bb0aeec358e59f58e8f
-
SHA512
ac02043038a2c1533513d20f797d2d87ee026f276213a5b08632589d32fefcd86b32720aa76ba044f0cee710e4df5b81a2351c617dbd45f980c5a2acd52599a2
-
SSDEEP
3072:YQx3u/I3uI0qRjH/AUOzblVuQmHMOKE0s3CqFJU4JQ8e8hD:Y035uI0qRjH6mLKE0ZAJU42
Behavioral task
behavioral1
Sample
h0416391.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
h0416391.exe
Resource
win10-20230915-en
Malware Config
Extracted
redline
luska
77.91.124.55:19071
-
auth_value
a6797888f51a88afbfd8854a79ac9357
Targets
-
-
Target
h0416391.exe
-
Size
174KB
-
MD5
3490d47f19fe14d322491487ce1b68e5
-
SHA1
8d81acd2e36d9cfe88a7a96df81401d9d2d65fc4
-
SHA256
64989754f83d4a28bec55ab7663f3b347b8c11a6175a5bb0aeec358e59f58e8f
-
SHA512
ac02043038a2c1533513d20f797d2d87ee026f276213a5b08632589d32fefcd86b32720aa76ba044f0cee710e4df5b81a2351c617dbd45f980c5a2acd52599a2
-
SSDEEP
3072:YQx3u/I3uI0qRjH/AUOzblVuQmHMOKE0s3CqFJU4JQ8e8hD:Y035uI0qRjH6mLKE0ZAJU42
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-