General
-
Target
57d02a309a2d1596df848f8cd7708fa3a9602c74
-
Size
364KB
-
Sample
241107-hn6veazqam
-
MD5
d9084c0c7506780c9de2219e59c2660d
-
SHA1
57d02a309a2d1596df848f8cd7708fa3a9602c74
-
SHA256
1c794df91474c5138f58ecb162c4535c47f18551d20ab164b7d6d6872a7f30ef
-
SHA512
5ac740225c4e6f1401419aa25da205a3c11d05c9392ceddb4b01d17dcfb8148c4a6b3b15c67c105bc2fd6ef9be302f5f454d2fee427ab30c98d05f4669c22ff6
-
SSDEEP
6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
Behavioral task
behavioral1
Sample
57d02a309a2d1596df848f8cd7708fa3a9602c74.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
57d02a309a2d1596df848f8cd7708fa3a9602c74.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
0002
13.72.81.58:13413
-
auth_value
866ce0ed8cfe2be77fb43a4912677698
Targets
-
-
Target
57d02a309a2d1596df848f8cd7708fa3a9602c74
-
Size
364KB
-
MD5
d9084c0c7506780c9de2219e59c2660d
-
SHA1
57d02a309a2d1596df848f8cd7708fa3a9602c74
-
SHA256
1c794df91474c5138f58ecb162c4535c47f18551d20ab164b7d6d6872a7f30ef
-
SHA512
5ac740225c4e6f1401419aa25da205a3c11d05c9392ceddb4b01d17dcfb8148c4a6b3b15c67c105bc2fd6ef9be302f5f454d2fee427ab30c98d05f4669c22ff6
-
SSDEEP
6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-