General
-
Target
7a023534e2ea54a80b0ea8f51ea6d053ff27a353ff153aaccd85568f67a32aa5
-
Size
469KB
-
Sample
241106-xrgf9avmgy
-
MD5
fef3d12a1fe20fced05419512b510cbb
-
SHA1
269939fd78d1d8878ce10dc36c7920a4174cba8d
-
SHA256
7a023534e2ea54a80b0ea8f51ea6d053ff27a353ff153aaccd85568f67a32aa5
-
SHA512
cd14a90731676b3ac9ba9028bb61f499c61984e193898bdcb4245e7185edbf58a7efd5f275ef07045a815b279c7f940878a4dceaefadbbdf9a60117884b125a6
-
SSDEEP
12288:dMrky90oZ78lEyTm+95+gWZr7Vi3Sgvq9qRnXQ:xy/1y/sgWjvOSqRnXQ
Static task
static1
Behavioral task
behavioral1
Sample
7a023534e2ea54a80b0ea8f51ea6d053ff27a353ff153aaccd85568f67a32aa5.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
fukia
193.233.20.13:4136
-
auth_value
e5783636fbd9e4f0cf9a017bce02e67e
Targets
-
-
Target
7a023534e2ea54a80b0ea8f51ea6d053ff27a353ff153aaccd85568f67a32aa5
-
Size
469KB
-
MD5
fef3d12a1fe20fced05419512b510cbb
-
SHA1
269939fd78d1d8878ce10dc36c7920a4174cba8d
-
SHA256
7a023534e2ea54a80b0ea8f51ea6d053ff27a353ff153aaccd85568f67a32aa5
-
SHA512
cd14a90731676b3ac9ba9028bb61f499c61984e193898bdcb4245e7185edbf58a7efd5f275ef07045a815b279c7f940878a4dceaefadbbdf9a60117884b125a6
-
SSDEEP
12288:dMrky90oZ78lEyTm+95+gWZr7Vi3Sgvq9qRnXQ:xy/1y/sgWjvOSqRnXQ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-