General
-
Target
0x00060000000157f7-83.dat
-
Size
172KB
-
Sample
240307-2wewfahd5x
-
MD5
abdaa2cd14b6f4135df4303102cb0cc4
-
SHA1
39fbcdf0ec5c054eee0c9021ca513c53af15d0e5
-
SHA256
c6faf97e3986bf7a92383b62d4c29a4011c74da876e92b2ce07816da75a477c2
-
SHA512
a9df990d35541f5e641d5f8805994a87184d1e98312bf2d3c0a52110e9e67c51f9d6712e325d42e4d441db178296510475a45c1a61d1f998c894f6938bf984da
-
SSDEEP
3072:sOPxkahkUcphQF470xNe0QA6AKlhA8e8hU:PPJexvAKlhA
Behavioral task
behavioral1
Sample
0x00060000000157f7-83.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0x00060000000157f7-83.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
redline
diza
83.97.73.126:19048
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
0x00060000000157f7-83.dat
-
Size
172KB
-
MD5
abdaa2cd14b6f4135df4303102cb0cc4
-
SHA1
39fbcdf0ec5c054eee0c9021ca513c53af15d0e5
-
SHA256
c6faf97e3986bf7a92383b62d4c29a4011c74da876e92b2ce07816da75a477c2
-
SHA512
a9df990d35541f5e641d5f8805994a87184d1e98312bf2d3c0a52110e9e67c51f9d6712e325d42e4d441db178296510475a45c1a61d1f998c894f6938bf984da
-
SSDEEP
3072:sOPxkahkUcphQF470xNe0QA6AKlhA8e8hU:PPJexvAKlhA
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-