General
-
Target
3825cc07186a641a5224c53459c2c4523965dac3fccb200e1e4772e57e8a87d3
-
Size
1.1MB
-
Sample
241104-vl3q7asqa1
-
MD5
f2803445c1165f9394777236f6d411b5
-
SHA1
023fe7a106f67a95e480baf368ebaa75727f0ee0
-
SHA256
3825cc07186a641a5224c53459c2c4523965dac3fccb200e1e4772e57e8a87d3
-
SHA512
d1e139ec01e7cc60aa865d83d0d0b4263ec9462d0a313807737665369e75afe81db1cf6adcdda2a730af6389e19b14e8c43e5550e266a1b82720d6af4eab592f
-
SSDEEP
24576:tymuHepAdq+FW983FSJ/YvP2bCNgsa5howEQVmLEQjNmS:It+HsWqAYXDNOhfEPQ
Static task
static1
Behavioral task
behavioral1
Sample
3825cc07186a641a5224c53459c2c4523965dac3fccb200e1e4772e57e8a87d3.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
doma
185.161.248.75:4132
-
auth_value
8be53af7f78567706928d0abef953ef4
Targets
-
-
Target
3825cc07186a641a5224c53459c2c4523965dac3fccb200e1e4772e57e8a87d3
-
Size
1.1MB
-
MD5
f2803445c1165f9394777236f6d411b5
-
SHA1
023fe7a106f67a95e480baf368ebaa75727f0ee0
-
SHA256
3825cc07186a641a5224c53459c2c4523965dac3fccb200e1e4772e57e8a87d3
-
SHA512
d1e139ec01e7cc60aa865d83d0d0b4263ec9462d0a313807737665369e75afe81db1cf6adcdda2a730af6389e19b14e8c43e5550e266a1b82720d6af4eab592f
-
SSDEEP
24576:tymuHepAdq+FW983FSJ/YvP2bCNgsa5howEQVmLEQjNmS:It+HsWqAYXDNOhfEPQ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-