General
-
Target
15a7601f1469cf9a233437068964966eabd9658852ca5bf654c1b5cdb1b58942
-
Size
1.2MB
-
Sample
241107-n2aa9atraj
-
MD5
948679e944a8fed7617fba3380538cb1
-
SHA1
cc3a9e1db59eaa3b0fd8f00540b9cf1363404159
-
SHA256
15a7601f1469cf9a233437068964966eabd9658852ca5bf654c1b5cdb1b58942
-
SHA512
867f38b7938876dfed59573656a7b08c23be4c37c122f7ef2c11a81b128fe4bc99d0067a67f218a3423a631d08fa71d3322ea8b4638f2ed3bffa6160c4963fd4
-
SSDEEP
24576:/yR/PhBOvoqtAtRGF5HjniYg2bIEijaUslbrSURRzE156Zgb:KRfOgFq7jiLMUib2czeE
Static task
static1
Behavioral task
behavioral1
Sample
15a7601f1469cf9a233437068964966eabd9658852ca5bf654c1b5cdb1b58942.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
doma
185.161.248.75:4132
-
auth_value
8be53af7f78567706928d0abef953ef4
Targets
-
-
Target
15a7601f1469cf9a233437068964966eabd9658852ca5bf654c1b5cdb1b58942
-
Size
1.2MB
-
MD5
948679e944a8fed7617fba3380538cb1
-
SHA1
cc3a9e1db59eaa3b0fd8f00540b9cf1363404159
-
SHA256
15a7601f1469cf9a233437068964966eabd9658852ca5bf654c1b5cdb1b58942
-
SHA512
867f38b7938876dfed59573656a7b08c23be4c37c122f7ef2c11a81b128fe4bc99d0067a67f218a3423a631d08fa71d3322ea8b4638f2ed3bffa6160c4963fd4
-
SSDEEP
24576:/yR/PhBOvoqtAtRGF5HjniYg2bIEijaUslbrSURRzE156Zgb:KRfOgFq7jiLMUib2czeE
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-