General
-
Target
b4c09dec5520bb618c0b91510e1cce19e12a9be0cf1a8cf0c24a757d80f0f37b
-
Size
373KB
-
Sample
241106-zgs4eaxhqm
-
MD5
3f97be9040839b807a28235553134fe5
-
SHA1
54e0a3d929bc5101fe5d4b3764e0964d2e2e46c0
-
SHA256
b4c09dec5520bb618c0b91510e1cce19e12a9be0cf1a8cf0c24a757d80f0f37b
-
SHA512
531bc9441ef6bb8b613aca916d730acd8b57fa0351e30a8b8c899c6ffa163aa550190f69cd1ced3ea5fde357e86d00770ed212edfe75fabd9da203795b2ed133
-
SSDEEP
6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R
Static task
static1
Behavioral task
behavioral1
Sample
b4c09dec5520bb618c0b91510e1cce19e12a9be0cf1a8cf0c24a757d80f0f37b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b4c09dec5520bb618c0b91510e1cce19e12a9be0cf1a8cf0c24a757d80f0f37b.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
1
45.9.20.59:46287
-
auth_value
ec6ada170bcec2e72f0e1f3954547f73
Targets
-
-
Target
b4c09dec5520bb618c0b91510e1cce19e12a9be0cf1a8cf0c24a757d80f0f37b
-
Size
373KB
-
MD5
3f97be9040839b807a28235553134fe5
-
SHA1
54e0a3d929bc5101fe5d4b3764e0964d2e2e46c0
-
SHA256
b4c09dec5520bb618c0b91510e1cce19e12a9be0cf1a8cf0c24a757d80f0f37b
-
SHA512
531bc9441ef6bb8b613aca916d730acd8b57fa0351e30a8b8c899c6ffa163aa550190f69cd1ced3ea5fde357e86d00770ed212edfe75fabd9da203795b2ed133
-
SSDEEP
6144:Ta688uEybYLDxWM6Sv86kWw5t51fUrhFwKr4xQFmNkFVtM63oFvb7ITsqXigaXwX:Ta688yY/0M6S5kWwghO24xPKtM557R
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-