General
-
Target
0x000800000001339d-78.dat
-
Size
172KB
-
Sample
240307-2z7qmahe6x
-
MD5
621c2c2bf6c9b8e059b8b464c0d441e2
-
SHA1
83d95edbc6143df0a44e6262aee91dfa9ffac91f
-
SHA256
b1e320c4727caaa3ebfb2829f0b8b3df55becf8238ab69efc88cfe4b2492d099
-
SHA512
6394583bbf599f8088e1e9d3945dec0f7ecd64e4b98e965b4a3347ee65b87408c503fa2889bfc6e6fdd73b4d7e6e7d54307f2d91b20a5d32bb86882b72c964ae
-
SSDEEP
3072:sOPxkahkUcphQF470xNe0QA6AKlhA8e8hU:PPJexvAKlhA
Behavioral task
behavioral1
Sample
0x000800000001339d-78.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0x000800000001339d-78.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
redline
diza
83.97.73.126:19048
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
0x000800000001339d-78.dat
-
Size
172KB
-
MD5
621c2c2bf6c9b8e059b8b464c0d441e2
-
SHA1
83d95edbc6143df0a44e6262aee91dfa9ffac91f
-
SHA256
b1e320c4727caaa3ebfb2829f0b8b3df55becf8238ab69efc88cfe4b2492d099
-
SHA512
6394583bbf599f8088e1e9d3945dec0f7ecd64e4b98e965b4a3347ee65b87408c503fa2889bfc6e6fdd73b4d7e6e7d54307f2d91b20a5d32bb86882b72c964ae
-
SSDEEP
3072:sOPxkahkUcphQF470xNe0QA6AKlhA8e8hU:PPJexvAKlhA
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-