General
-
Target
13919245989cf9df51b4e5fd2bee254d806cfe37f18d0f1c3f20580111fcbb0e
-
Size
434KB
-
Sample
241105-nxyhaasral
-
MD5
a77901e339b8cb83e1032afdac435a3e
-
SHA1
3514e3031c720b2f09b74f6235821e5571fcd530
-
SHA256
13919245989cf9df51b4e5fd2bee254d806cfe37f18d0f1c3f20580111fcbb0e
-
SHA512
f180a10c674ad08b53c697a32f120403aa0b282d6ae5811f1a811bf3c1f199b9ab0e051c10d2a2757a4c1db3d5d17eeb4b97248f4fb33f6ca56ebd89e25cae3f
-
SSDEEP
6144:z6b0HLLvfYOGa7hFs+TMrSwRoSIPbYVMoNr/psoF3736O1GdkT3TBNht:b6avJMvoS6bgMoNr/psoFr36O+kT3F
Static task
static1
Behavioral task
behavioral1
Sample
13919245989cf9df51b4e5fd2bee254d806cfe37f18d0f1c3f20580111fcbb0e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
13919245989cf9df51b4e5fd2bee254d806cfe37f18d0f1c3f20580111fcbb0e.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
asia
45.9.20.240:46257
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
-
Target
13919245989cf9df51b4e5fd2bee254d806cfe37f18d0f1c3f20580111fcbb0e
-
Size
434KB
-
MD5
a77901e339b8cb83e1032afdac435a3e
-
SHA1
3514e3031c720b2f09b74f6235821e5571fcd530
-
SHA256
13919245989cf9df51b4e5fd2bee254d806cfe37f18d0f1c3f20580111fcbb0e
-
SHA512
f180a10c674ad08b53c697a32f120403aa0b282d6ae5811f1a811bf3c1f199b9ab0e051c10d2a2757a4c1db3d5d17eeb4b97248f4fb33f6ca56ebd89e25cae3f
-
SSDEEP
6144:z6b0HLLvfYOGa7hFs+TMrSwRoSIPbYVMoNr/psoF3736O1GdkT3TBNht:b6avJMvoS6bgMoNr/psoFr36O+kT3F
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-