General
-
Target
35e70bae7b74cac9c2c681fdfc261f5077d41cd65e2eaf921d7f6551eca99e20
-
Size
370KB
-
Sample
241107-mhr7aatjcp
-
MD5
2c7fc77a16920cb2cfbb705932d49edd
-
SHA1
d89d4778b238f05e4f647e3f5eec6064e628e807
-
SHA256
35e70bae7b74cac9c2c681fdfc261f5077d41cd65e2eaf921d7f6551eca99e20
-
SHA512
b9eb4c7cd17796b76d33b3d21a1fbb608f4b0c45719300545e272404bee0e0f3f099974b113945cf8e789a474bfc58023fc97cad5e730ee34e5e9217f7f30140
-
SSDEEP
6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R
Static task
static1
Behavioral task
behavioral1
Sample
35e70bae7b74cac9c2c681fdfc261f5077d41cd65e2eaf921d7f6551eca99e20.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
35e70bae7b74cac9c2c681fdfc261f5077d41cd65e2eaf921d7f6551eca99e20.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
1
45.9.20.59:46287
-
auth_value
ec6ada170bcec2e72f0e1f3954547f73
Targets
-
-
Target
35e70bae7b74cac9c2c681fdfc261f5077d41cd65e2eaf921d7f6551eca99e20
-
Size
370KB
-
MD5
2c7fc77a16920cb2cfbb705932d49edd
-
SHA1
d89d4778b238f05e4f647e3f5eec6064e628e807
-
SHA256
35e70bae7b74cac9c2c681fdfc261f5077d41cd65e2eaf921d7f6551eca99e20
-
SHA512
b9eb4c7cd17796b76d33b3d21a1fbb608f4b0c45719300545e272404bee0e0f3f099974b113945cf8e789a474bfc58023fc97cad5e730ee34e5e9217f7f30140
-
SSDEEP
6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-