General
-
Target
481487d888a109b663cc265f054d2327db0897c5897129fe28d3c9e6412c472f
-
Size
433KB
-
Sample
241106-kz7l7azkfr
-
MD5
a9b45b9b7ea345a1d72c8d80884ba32d
-
SHA1
5254a9d86ae396dc1587cbbe04f6bddcbfb7c56a
-
SHA256
481487d888a109b663cc265f054d2327db0897c5897129fe28d3c9e6412c472f
-
SHA512
26ec5bc559c79bb75dcf9789a6b20cd9200058b8acc1a471e4cdd03cf5f2493c793d10b5504463087f13bcd12e0da19f4717733125ed2f4e44399d7711920f15
-
SSDEEP
6144:pOR5Bk9cF45s5zJtXXYLE/32/bW7JF3qpDLUwznoFid:c/B4H5WJqLE/6W773qpEwzno4
Static task
static1
Behavioral task
behavioral1
Sample
481487d888a109b663cc265f054d2327db0897c5897129fe28d3c9e6412c472f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
481487d888a109b663cc265f054d2327db0897c5897129fe28d3c9e6412c472f.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
asia
45.9.20.240:46257
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
-
Target
481487d888a109b663cc265f054d2327db0897c5897129fe28d3c9e6412c472f
-
Size
433KB
-
MD5
a9b45b9b7ea345a1d72c8d80884ba32d
-
SHA1
5254a9d86ae396dc1587cbbe04f6bddcbfb7c56a
-
SHA256
481487d888a109b663cc265f054d2327db0897c5897129fe28d3c9e6412c472f
-
SHA512
26ec5bc559c79bb75dcf9789a6b20cd9200058b8acc1a471e4cdd03cf5f2493c793d10b5504463087f13bcd12e0da19f4717733125ed2f4e44399d7711920f15
-
SSDEEP
6144:pOR5Bk9cF45s5zJtXXYLE/32/bW7JF3qpDLUwznoFid:c/B4H5WJqLE/6W773qpEwzno4
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-