General
-
Target
493d3458e77a3eef4d8fb20cab6e3cd9
-
Size
332KB
-
Sample
231219-segt2acfd6
-
MD5
493d3458e77a3eef4d8fb20cab6e3cd9
-
SHA1
23def6243c2142b44de4a73a24de4e186f4929eb
-
SHA256
630249e0624415f6ab92fd59a4e2383868284bfc31b49a3b6980674c57f70663
-
SHA512
3926c346562d7959300e719232f2d7c4379c6fa5cd609b671f331453724af7a863f6d52f572ba65cdc9010d731a8cc4fc3e2c5e2243e52be41e379443bdc2129
-
SSDEEP
6144:yoxeQWHeUfxB4fjBZZzy5omD1WH99YuR36z53PYNiOju3Tgg+ou:ycc+MxB4Zzy5o/HbPJ6Ngg3Tgtb
Static task
static1
Behavioral task
behavioral1
Sample
493d3458e77a3eef4d8fb20cab6e3cd9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
493d3458e77a3eef4d8fb20cab6e3cd9.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
redline
paladin
178.63.26.132:29795
Targets
-
-
Target
493d3458e77a3eef4d8fb20cab6e3cd9
-
Size
332KB
-
MD5
493d3458e77a3eef4d8fb20cab6e3cd9
-
SHA1
23def6243c2142b44de4a73a24de4e186f4929eb
-
SHA256
630249e0624415f6ab92fd59a4e2383868284bfc31b49a3b6980674c57f70663
-
SHA512
3926c346562d7959300e719232f2d7c4379c6fa5cd609b671f331453724af7a863f6d52f572ba65cdc9010d731a8cc4fc3e2c5e2243e52be41e379443bdc2129
-
SSDEEP
6144:yoxeQWHeUfxB4fjBZZzy5omD1WH99YuR36z53PYNiOju3Tgg+ou:ycc+MxB4Zzy5o/HbPJ6Ngg3Tgtb
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SectopRAT payload
-