General
-
Target
11c066031a844570529c69f5876ff855d9025ceae1a9028350f02bcea08ea5a9
-
Size
1.1MB
-
Sample
241107-jgtryayekj
-
MD5
56ef3ad7e2f5d400c057efefab02ef39
-
SHA1
8d97f2aaa01c447e088b6ba34beef8defd6e79ad
-
SHA256
11c066031a844570529c69f5876ff855d9025ceae1a9028350f02bcea08ea5a9
-
SHA512
239c688ecb9bb8adf5844e9348bccfc735772e9531647047f49f2c23e65a583777789e8ac5ac7ceda54540f35b3573735cb8cdc7a2712738f626764a75ef2d26
-
SSDEEP
24576:byzzkEILlL0Tsm6BlV86jxDOIgOdJK4H5:OzzkEM0rKlV/1VTbK4H
Static task
static1
Behavioral task
behavioral1
Sample
11c066031a844570529c69f5876ff855d9025ceae1a9028350f02bcea08ea5a9.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
doma
185.161.248.75:4132
-
auth_value
8be53af7f78567706928d0abef953ef4
Targets
-
-
Target
11c066031a844570529c69f5876ff855d9025ceae1a9028350f02bcea08ea5a9
-
Size
1.1MB
-
MD5
56ef3ad7e2f5d400c057efefab02ef39
-
SHA1
8d97f2aaa01c447e088b6ba34beef8defd6e79ad
-
SHA256
11c066031a844570529c69f5876ff855d9025ceae1a9028350f02bcea08ea5a9
-
SHA512
239c688ecb9bb8adf5844e9348bccfc735772e9531647047f49f2c23e65a583777789e8ac5ac7ceda54540f35b3573735cb8cdc7a2712738f626764a75ef2d26
-
SSDEEP
24576:byzzkEILlL0Tsm6BlV86jxDOIgOdJK4H5:OzzkEM0rKlV/1VTbK4H
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-