General
-
Target
1144572739c4a9bdedc9da1f6a6c0dafb3c182018d87b83afc88d4bcd006f205
-
Size
477KB
-
Sample
241107-pv9yza1qbx
-
MD5
0fabc03fb48a8fb778d3ce710421f069
-
SHA1
1edc1549333706753a5be82edf5ce614c448382c
-
SHA256
1144572739c4a9bdedc9da1f6a6c0dafb3c182018d87b83afc88d4bcd006f205
-
SHA512
b5b90943d0f575b8bdbdb6ccdbff3227853eec8f17378d8e03aaa21b1512e62ac6806672fb448c7284939a2d7b8a6ca787178ce8a98413684d7bc538e9a1826b
-
SSDEEP
6144:K5y+bnr+zp0yN90QEC2z21pN6xskbMkCVdJwv3/l9mXBKvyNbFPmxz+J:nMrXy90L6/N6xsgtC1wvTmk8Ru+
Static task
static1
Behavioral task
behavioral1
Sample
1144572739c4a9bdedc9da1f6a6c0dafb3c182018d87b83afc88d4bcd006f205.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
fukia
193.233.20.13:4136
-
auth_value
e5783636fbd9e4f0cf9a017bce02e67e
Targets
-
-
Target
1144572739c4a9bdedc9da1f6a6c0dafb3c182018d87b83afc88d4bcd006f205
-
Size
477KB
-
MD5
0fabc03fb48a8fb778d3ce710421f069
-
SHA1
1edc1549333706753a5be82edf5ce614c448382c
-
SHA256
1144572739c4a9bdedc9da1f6a6c0dafb3c182018d87b83afc88d4bcd006f205
-
SHA512
b5b90943d0f575b8bdbdb6ccdbff3227853eec8f17378d8e03aaa21b1512e62ac6806672fb448c7284939a2d7b8a6ca787178ce8a98413684d7bc538e9a1826b
-
SSDEEP
6144:K5y+bnr+zp0yN90QEC2z21pN6xskbMkCVdJwv3/l9mXBKvyNbFPmxz+J:nMrXy90L6/N6xsgtC1wvTmk8Ru+
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-