General
-
Target
f20cfc1fe702b691e8bfaab5f4e02c44df5a3fe233cd98e0e33e5069233e2055
-
Size
394KB
-
Sample
241108-b57ppsvmgp
-
MD5
644d7a3b39943ce0c5654092042b2d37
-
SHA1
6ffe8504da1c119de8794f7c3687ccba81de8ea0
-
SHA256
f20cfc1fe702b691e8bfaab5f4e02c44df5a3fe233cd98e0e33e5069233e2055
-
SHA512
1b80b3f97276bafb3b7a226e1294278c1aeca85dec9a48429529d8777b93d572ce5f4daf3f9159d2cf11cf8f09e833c8955143ae56559f6ce6ae2fd7cf7a2d7c
-
SSDEEP
6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s
Static task
static1
Behavioral task
behavioral1
Sample
f20cfc1fe702b691e8bfaab5f4e02c44df5a3fe233cd98e0e33e5069233e2055.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f20cfc1fe702b691e8bfaab5f4e02c44df5a3fe233cd98e0e33e5069233e2055.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
1
45.9.20.59:46287
-
auth_value
ec6ada170bcec2e72f0e1f3954547f73
Targets
-
-
Target
f20cfc1fe702b691e8bfaab5f4e02c44df5a3fe233cd98e0e33e5069233e2055
-
Size
394KB
-
MD5
644d7a3b39943ce0c5654092042b2d37
-
SHA1
6ffe8504da1c119de8794f7c3687ccba81de8ea0
-
SHA256
f20cfc1fe702b691e8bfaab5f4e02c44df5a3fe233cd98e0e33e5069233e2055
-
SHA512
1b80b3f97276bafb3b7a226e1294278c1aeca85dec9a48429529d8777b93d572ce5f4daf3f9159d2cf11cf8f09e833c8955143ae56559f6ce6ae2fd7cf7a2d7c
-
SSDEEP
6144:4YodGDQYA+HaNjx2LYs6R0u3JmpsiKBn8uzbgwu6L7ITsqSigaTwVfV:4YodGDqBXG6jJispBn8unnn7s
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-