General
-
Target
87f1d99d4e547ee5bd94b94ef3881ca8e5d73d67cc282100c2c379563c57cb79
-
Size
753KB
-
Sample
241106-qdvndszlgw
-
MD5
d046988a63ccf6b3c4860b1710ae1cd3
-
SHA1
0c72a1967602398435178b094c948df2280ff9c5
-
SHA256
87f1d99d4e547ee5bd94b94ef3881ca8e5d73d67cc282100c2c379563c57cb79
-
SHA512
1bac09b5f92159f7d6350d38957d668e339a420df0524cf71b5d8ca016b2305ab288781dcf3f88506a3feeaac9f28385f2308db3362cc2ec9c71508025fb9ecc
-
SSDEEP
12288:qMr1y90v166/uOrGpjwlauj6PDri9cMJJq1NP1WfT+WWmbuv/hbamDv1D9iC/w:/yodruh86r29cMqB1AiWWmitlcsw
Static task
static1
Behavioral task
behavioral1
Sample
87f1d99d4e547ee5bd94b94ef3881ca8e5d73d67cc282100c2c379563c57cb79.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
diza
83.97.73.127:19045
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Targets
-
-
Target
87f1d99d4e547ee5bd94b94ef3881ca8e5d73d67cc282100c2c379563c57cb79
-
Size
753KB
-
MD5
d046988a63ccf6b3c4860b1710ae1cd3
-
SHA1
0c72a1967602398435178b094c948df2280ff9c5
-
SHA256
87f1d99d4e547ee5bd94b94ef3881ca8e5d73d67cc282100c2c379563c57cb79
-
SHA512
1bac09b5f92159f7d6350d38957d668e339a420df0524cf71b5d8ca016b2305ab288781dcf3f88506a3feeaac9f28385f2308db3362cc2ec9c71508025fb9ecc
-
SSDEEP
12288:qMr1y90v166/uOrGpjwlauj6PDri9cMJJq1NP1WfT+WWmbuv/hbamDv1D9iC/w:/yodruh86r29cMqB1AiWWmitlcsw
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-