General
-
Target
1688-100-0x0000000000B60000-0x0000000000BA4000-memory.dmp
-
Size
272KB
-
Sample
240302-rlt79seb6s
-
MD5
8ee081955f242b831c99f1fe4da32db3
-
SHA1
dae7794624eb9cc8f2ef7f18288ea3c6b63fd0b3
-
SHA256
869c5260b90efe76b53f0217fa51390e4944201d3e8626b0384920af144c37cc
-
SHA512
12eaa096112329652b3aec62ce424d6ed794ccc39ed9461728cce5812d9ed6376358069588352ce08fe7b12b27e09a9e2004f9d90c03e8780884f5b2f172217d
-
SSDEEP
3072:J6j4ELN6FY9Cff3n0sk+wziR/o40DrNwAhFMnImax8EExNn2pU9f2MKTV/wi4lrl:J6jiD30sk+wzYZAhunI7x8
Behavioral task
behavioral1
Sample
1688-100-0x0000000000B60000-0x0000000000BA4000-memory.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1688-100-0x0000000000B60000-0x0000000000BA4000-memory.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
redline
mango
193.233.20.28:4125
-
auth_value
ecf79d7f5227d998a3501c972d915d23
Targets
-
-
Target
1688-100-0x0000000000B60000-0x0000000000BA4000-memory.dmp
-
Size
272KB
-
MD5
8ee081955f242b831c99f1fe4da32db3
-
SHA1
dae7794624eb9cc8f2ef7f18288ea3c6b63fd0b3
-
SHA256
869c5260b90efe76b53f0217fa51390e4944201d3e8626b0384920af144c37cc
-
SHA512
12eaa096112329652b3aec62ce424d6ed794ccc39ed9461728cce5812d9ed6376358069588352ce08fe7b12b27e09a9e2004f9d90c03e8780884f5b2f172217d
-
SSDEEP
3072:J6j4ELN6FY9Cff3n0sk+wziR/o40DrNwAhFMnImax8EExNn2pU9f2MKTV/wi4lrl:J6jiD30sk+wzYZAhunI7x8
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-