General
-
Target
c81aea247f707f8f8e5d6dcc798547f48e940f24a12d6e15bd8177ab06635a17
-
Size
1.5MB
-
Sample
240501-dn1aeaee6s
-
MD5
4e1033f29d7b0f7f48d70ab88e444bdf
-
SHA1
1993a6860c50a8abe9fb1830010054e23329f0b1
-
SHA256
c81aea247f707f8f8e5d6dcc798547f48e940f24a12d6e15bd8177ab06635a17
-
SHA512
55d66ffade05bab05f1b7391aef5eec30048cd6a5bb31f7865b1438aaa21e3768394b850b957676670187b9084f939d9fd041471135b39456a7cf960d7910235
-
SSDEEP
24576:xyd31pJazr7PNQiOPDn5dbMEZcOgmE/luFKzxQcSe/Xo08WAoMGUQvDouj5NQaea:kd3nJGr71DOnLMgrE/1ee/R8WAeUQvDP
Static task
static1
Behavioral task
behavioral1
Sample
c81aea247f707f8f8e5d6dcc798547f48e940f24a12d6e15bd8177ab06635a17.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
redline
most
185.161.248.73:4164
-
auth_value
7da4dfa153f2919e617aa016f7c36008
Targets
-
-
Target
c81aea247f707f8f8e5d6dcc798547f48e940f24a12d6e15bd8177ab06635a17
-
Size
1.5MB
-
MD5
4e1033f29d7b0f7f48d70ab88e444bdf
-
SHA1
1993a6860c50a8abe9fb1830010054e23329f0b1
-
SHA256
c81aea247f707f8f8e5d6dcc798547f48e940f24a12d6e15bd8177ab06635a17
-
SHA512
55d66ffade05bab05f1b7391aef5eec30048cd6a5bb31f7865b1438aaa21e3768394b850b957676670187b9084f939d9fd041471135b39456a7cf960d7910235
-
SSDEEP
24576:xyd31pJazr7PNQiOPDn5dbMEZcOgmE/luFKzxQcSe/Xo08WAoMGUQvDouj5NQaea:kd3nJGr71DOnLMgrE/1ee/R8WAeUQvDP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Detects executables packed with ConfuserEx Mod
-
Executes dropped EXE
-
Adds Run key to start application
-