General
-
Target
d3c063d5bd02d0cbbb199eb4108f15785e46eaf8aa981948439d785c77b374d1
-
Size
1.1MB
-
Sample
241108-d8zvdatnfy
-
MD5
19ffd96c3f9769a63bf51f054f84ff11
-
SHA1
5dc32a68fa39d4015f3bbce517716ad7aadda58f
-
SHA256
d3c063d5bd02d0cbbb199eb4108f15785e46eaf8aa981948439d785c77b374d1
-
SHA512
c6b54fca2010be5da406dd5013c6fb4d0f05ca4b779d3279e40027774cf6e5719f82eed3beafce235fa6aa32e22ac8743dc1c258fafa904ed79e779a923775ba
-
SSDEEP
24576:gyTwNJfldbBnTK6yKLYaeqTeXy8ZmvomTEWqu41YV:nAtTBTK65LYJHXCo
Static task
static1
Behavioral task
behavioral1
Sample
d3c063d5bd02d0cbbb199eb4108f15785e46eaf8aa981948439d785c77b374d1.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
doma
185.161.248.75:4132
-
auth_value
8be53af7f78567706928d0abef953ef4
Targets
-
-
Target
d3c063d5bd02d0cbbb199eb4108f15785e46eaf8aa981948439d785c77b374d1
-
Size
1.1MB
-
MD5
19ffd96c3f9769a63bf51f054f84ff11
-
SHA1
5dc32a68fa39d4015f3bbce517716ad7aadda58f
-
SHA256
d3c063d5bd02d0cbbb199eb4108f15785e46eaf8aa981948439d785c77b374d1
-
SHA512
c6b54fca2010be5da406dd5013c6fb4d0f05ca4b779d3279e40027774cf6e5719f82eed3beafce235fa6aa32e22ac8743dc1c258fafa904ed79e779a923775ba
-
SSDEEP
24576:gyTwNJfldbBnTK6yKLYaeqTeXy8ZmvomTEWqu41YV:nAtTBTK65LYJHXCo
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-