General
-
Target
0x0006000000014140-109.dat
-
Size
172KB
-
Sample
240308-am65sabb51
-
MD5
98db40fd7b9922b16f0ab64e4af487d8
-
SHA1
c7f247901a8f841ccf2a73f7634a695c24a1bb65
-
SHA256
8ebf4085b0d273edb9a51b83c26e25fe0041879b75d46ff0dee73e0678cfdce9
-
SHA512
d67b0536fe98892deba5b9a1c2f8f123d8ac57716d305e47ae48d3552fd9d8bf60a39f7a7996f4e31431b7fa7cad9248a32c3ab74ae6c53874486367eb231b49
-
SSDEEP
3072:QBF8QOIKbe97H9rWRxNB2NjrOSHy+8e8hg:q8MVdaHMOSHy+
Behavioral task
behavioral1
Sample
0x0006000000014140-109.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0x0006000000014140-109.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19048
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
0x0006000000014140-109.dat
-
Size
172KB
-
MD5
98db40fd7b9922b16f0ab64e4af487d8
-
SHA1
c7f247901a8f841ccf2a73f7634a695c24a1bb65
-
SHA256
8ebf4085b0d273edb9a51b83c26e25fe0041879b75d46ff0dee73e0678cfdce9
-
SHA512
d67b0536fe98892deba5b9a1c2f8f123d8ac57716d305e47ae48d3552fd9d8bf60a39f7a7996f4e31431b7fa7cad9248a32c3ab74ae6c53874486367eb231b49
-
SSDEEP
3072:QBF8QOIKbe97H9rWRxNB2NjrOSHy+8e8hg:q8MVdaHMOSHy+
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-