General
-
Target
b29ab8b4027063f1877f1816d69fd37740df11488ec7f0dbdc77595464afa892
-
Size
1.1MB
-
Sample
241106-q9yd6a1epg
-
MD5
8025d020d53f9b9a9be068c4eff68a63
-
SHA1
9443bdb281cf6d0283849424925edcc3191d2f3e
-
SHA256
b29ab8b4027063f1877f1816d69fd37740df11488ec7f0dbdc77595464afa892
-
SHA512
25569ea9f6038d41bd9eaea2bef03299063a5ae2f51ffc8e23275ee25a67fd8bbc5edc240b7ebdb0325499bb1905b00fe9c4679ef6292cd820546ae8b91f6fa1
-
SSDEEP
24576:jyhyhMDsP+AaWED/w5fV6swX3722U1mxGeYC:2hU+vpWErgN6t61mxV
Static task
static1
Behavioral task
behavioral1
Sample
b29ab8b4027063f1877f1816d69fd37740df11488ec7f0dbdc77595464afa892.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
doma
185.161.248.75:4132
-
auth_value
8be53af7f78567706928d0abef953ef4
Targets
-
-
Target
b29ab8b4027063f1877f1816d69fd37740df11488ec7f0dbdc77595464afa892
-
Size
1.1MB
-
MD5
8025d020d53f9b9a9be068c4eff68a63
-
SHA1
9443bdb281cf6d0283849424925edcc3191d2f3e
-
SHA256
b29ab8b4027063f1877f1816d69fd37740df11488ec7f0dbdc77595464afa892
-
SHA512
25569ea9f6038d41bd9eaea2bef03299063a5ae2f51ffc8e23275ee25a67fd8bbc5edc240b7ebdb0325499bb1905b00fe9c4679ef6292cd820546ae8b91f6fa1
-
SSDEEP
24576:jyhyhMDsP+AaWED/w5fV6swX3722U1mxGeYC:2hU+vpWErgN6t61mxV
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-