General
-
Target
ec5e5e601cfbca30bd44b6721907330389ffcb07d6298eb4057471937b86c9b8
-
Size
433KB
-
Sample
241106-xfe42svhpa
-
MD5
635a6fa0c7f962816006b21389cd5aa2
-
SHA1
888dd3c0fd22b843fb04112eb0906ccb0d136a6b
-
SHA256
ec5e5e601cfbca30bd44b6721907330389ffcb07d6298eb4057471937b86c9b8
-
SHA512
f6ab95cc54d3331365f2f95740c80fa19132803d43d3e8d7095671d7fd39774ca1ad2224769ab2b3c8918f9577fbb470815110d3040ca7de157ee83f76f97e58
-
SSDEEP
6144:gkzT5Nf9ZbDnOgfq1HjKNi+Hn33b8poHwiMc4oKoN3:fT5XZ+gfqdjKNdHn33bAoHwQ4oKM
Static task
static1
Behavioral task
behavioral1
Sample
ec5e5e601cfbca30bd44b6721907330389ffcb07d6298eb4057471937b86c9b8.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ec5e5e601cfbca30bd44b6721907330389ffcb07d6298eb4057471937b86c9b8.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
asia
45.9.20.240:46257
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
-
Target
ec5e5e601cfbca30bd44b6721907330389ffcb07d6298eb4057471937b86c9b8
-
Size
433KB
-
MD5
635a6fa0c7f962816006b21389cd5aa2
-
SHA1
888dd3c0fd22b843fb04112eb0906ccb0d136a6b
-
SHA256
ec5e5e601cfbca30bd44b6721907330389ffcb07d6298eb4057471937b86c9b8
-
SHA512
f6ab95cc54d3331365f2f95740c80fa19132803d43d3e8d7095671d7fd39774ca1ad2224769ab2b3c8918f9577fbb470815110d3040ca7de157ee83f76f97e58
-
SSDEEP
6144:gkzT5Nf9ZbDnOgfq1HjKNi+Hn33b8poHwiMc4oKoN3:fT5XZ+gfqdjKNdHn33bAoHwQ4oKM
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-