General
-
Target
ed172bf72a02b3177ca648d3a3ef59d48ca570fcbab1ca71a68a04270e76a90a
-
Size
442KB
-
Sample
241105-esttvswrem
-
MD5
a10731aa78a4e9f3251a6af0e314bf28
-
SHA1
286f0a9a8f2638fda0ff3a08d22427450678046c
-
SHA256
ed172bf72a02b3177ca648d3a3ef59d48ca570fcbab1ca71a68a04270e76a90a
-
SHA512
3c0f18c3ea29e4125f40067da504f18bdbfe510464a48b02ef8fe3d2efa275ef367f5a735220a8334231b54c9d5a0d2c7c3fdbbae1464c9e4742badbda6cf569
-
SSDEEP
6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov
Static task
static1
Behavioral task
behavioral1
Sample
ed172bf72a02b3177ca648d3a3ef59d48ca570fcbab1ca71a68a04270e76a90a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ed172bf72a02b3177ca648d3a3ef59d48ca570fcbab1ca71a68a04270e76a90a.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
1
45.9.20.59:46287
-
auth_value
ec6ada170bcec2e72f0e1f3954547f73
Targets
-
-
Target
ed172bf72a02b3177ca648d3a3ef59d48ca570fcbab1ca71a68a04270e76a90a
-
Size
442KB
-
MD5
a10731aa78a4e9f3251a6af0e314bf28
-
SHA1
286f0a9a8f2638fda0ff3a08d22427450678046c
-
SHA256
ed172bf72a02b3177ca648d3a3ef59d48ca570fcbab1ca71a68a04270e76a90a
-
SHA512
3c0f18c3ea29e4125f40067da504f18bdbfe510464a48b02ef8fe3d2efa275ef367f5a735220a8334231b54c9d5a0d2c7c3fdbbae1464c9e4742badbda6cf569
-
SSDEEP
6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-