General
-
Target
a9d39f54f3df0f84e9354a795270e632b164c390b1b3e7240152f3e87c3563cc
-
Size
302KB
-
Sample
241108-es1x6svgmh
-
MD5
98bee04cdd9e34248e0799cd89bb0b02
-
SHA1
ef180dfbdc42959e9f025589b08345e0f68d28b6
-
SHA256
a9d39f54f3df0f84e9354a795270e632b164c390b1b3e7240152f3e87c3563cc
-
SHA512
c9ba66aebcae9d6cfa5a9b3bdafab8554faebbcef9009cf78ce2c49de4e759221680ba9def2104bb355978ac739a2b84688ceca9b1536bbc268b5dee14df90f7
-
SSDEEP
3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ
Static task
static1
Behavioral task
behavioral1
Sample
a9d39f54f3df0f84e9354a795270e632b164c390b1b3e7240152f3e87c3563cc.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a9d39f54f3df0f84e9354a795270e632b164c390b1b3e7240152f3e87c3563cc.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
11
45.9.20.157:46257
-
auth_value
344c26d7f808f9c29e47633026f19aa5
Targets
-
-
Target
a9d39f54f3df0f84e9354a795270e632b164c390b1b3e7240152f3e87c3563cc
-
Size
302KB
-
MD5
98bee04cdd9e34248e0799cd89bb0b02
-
SHA1
ef180dfbdc42959e9f025589b08345e0f68d28b6
-
SHA256
a9d39f54f3df0f84e9354a795270e632b164c390b1b3e7240152f3e87c3563cc
-
SHA512
c9ba66aebcae9d6cfa5a9b3bdafab8554faebbcef9009cf78ce2c49de4e759221680ba9def2104bb355978ac739a2b84688ceca9b1536bbc268b5dee14df90f7
-
SSDEEP
3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-