General
-
Target
c33a0e00bbcde9dc48d5f845bf6c8b56c2f94ea3601c6879a1b72d5f047fb134
-
Size
1.1MB
-
Sample
241108-hc5g7szmer
-
MD5
67140f7f63f24c6e992139378c4020b8
-
SHA1
146cd965372c1bde95c57f1de898bdfcbeddcca2
-
SHA256
c33a0e00bbcde9dc48d5f845bf6c8b56c2f94ea3601c6879a1b72d5f047fb134
-
SHA512
62034f239430d6f32db02b0d0250acd1fbad2a17b56722db84a4dc4c538311862f9817c4e39b64eaa64e21dfe0d7399d9187bb8680595251d2bf76bba01ae74f
-
SSDEEP
24576:6yVQSIe2prqcN0ljd0UDJpFa5cdQ/0moBvK91PSxKZrSea3lkd0Sx:BV7IRRMaYvFa5WQMmo5USb3lkyS
Static task
static1
Behavioral task
behavioral1
Sample
c33a0e00bbcde9dc48d5f845bf6c8b56c2f94ea3601c6879a1b72d5f047fb134.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
doma
185.161.248.75:4132
-
auth_value
8be53af7f78567706928d0abef953ef4
Targets
-
-
Target
c33a0e00bbcde9dc48d5f845bf6c8b56c2f94ea3601c6879a1b72d5f047fb134
-
Size
1.1MB
-
MD5
67140f7f63f24c6e992139378c4020b8
-
SHA1
146cd965372c1bde95c57f1de898bdfcbeddcca2
-
SHA256
c33a0e00bbcde9dc48d5f845bf6c8b56c2f94ea3601c6879a1b72d5f047fb134
-
SHA512
62034f239430d6f32db02b0d0250acd1fbad2a17b56722db84a4dc4c538311862f9817c4e39b64eaa64e21dfe0d7399d9187bb8680595251d2bf76bba01ae74f
-
SSDEEP
24576:6yVQSIe2prqcN0ljd0UDJpFa5cdQ/0moBvK91PSxKZrSea3lkd0Sx:BV7IRRMaYvFa5WQMmo5USb3lkyS
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-