General
-
Target
bd4e26de8f79656fb0077086e5f73ac159533d98e9feb7209aace3b72aac742a
-
Size
1.1MB
-
Sample
241106-tddxestdlr
-
MD5
997984708b1249a1dc148eac0980263e
-
SHA1
ace521984a3abce7eade1e7c7df9cbea79f5f1d0
-
SHA256
bd4e26de8f79656fb0077086e5f73ac159533d98e9feb7209aace3b72aac742a
-
SHA512
431b0ce96b10b1a2a5aae39b6bea8f106908120b728e50763a5bf633a3bfcca899a0b94c9ea1a9d15e274ccb94034ecbc8cb67207faf85b155605dcdd7de9960
-
SSDEEP
24576:hy6OmA76F0rYSuj1Gwr/lJDVhn1sUEuLgAmc54U4E/A:U6Om420cAAlJDVhnVj+UL
Static task
static1
Behavioral task
behavioral1
Sample
bd4e26de8f79656fb0077086e5f73ac159533d98e9feb7209aace3b72aac742a.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
doma
185.161.248.75:4132
-
auth_value
8be53af7f78567706928d0abef953ef4
Targets
-
-
Target
bd4e26de8f79656fb0077086e5f73ac159533d98e9feb7209aace3b72aac742a
-
Size
1.1MB
-
MD5
997984708b1249a1dc148eac0980263e
-
SHA1
ace521984a3abce7eade1e7c7df9cbea79f5f1d0
-
SHA256
bd4e26de8f79656fb0077086e5f73ac159533d98e9feb7209aace3b72aac742a
-
SHA512
431b0ce96b10b1a2a5aae39b6bea8f106908120b728e50763a5bf633a3bfcca899a0b94c9ea1a9d15e274ccb94034ecbc8cb67207faf85b155605dcdd7de9960
-
SSDEEP
24576:hy6OmA76F0rYSuj1Gwr/lJDVhn1sUEuLgAmc54U4E/A:U6Om420cAAlJDVhnVj+UL
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-