General
-
Target
37fa8d628b9556c5165e85948e7346991e91d065fe02ea9ade1555098d181ea6
-
Size
410KB
-
Sample
241108-j5emxsyhmp
-
MD5
bb5323fb16c41c947829f835693596eb
-
SHA1
07d5b3de1e93aa6ef712da290ccd1fa2c0f95b30
-
SHA256
37fa8d628b9556c5165e85948e7346991e91d065fe02ea9ade1555098d181ea6
-
SHA512
82a2087f224ed0148be6777410b6f92c50e8dd246712fec0b845fd8aeb41d53a8a6be0f80cd18d4ec1f9bd770ce80e54d57434778c51c7c4c3c9a777307ebad9
-
SSDEEP
12288:8CpWEa5PC9Y/+dRpTe/lLOklgYdcYbf7ts:8YoK8+UqklOYbf7e
Static task
static1
Behavioral task
behavioral1
Sample
37fa8d628b9556c5165e85948e7346991e91d065fe02ea9ade1555098d181ea6.exe
Resource
win7-20240708-en
Malware Config
Extracted
redline
UDP
45.9.20.182:52236
-
auth_value
a272f3a2850ec3dccdaed97234b7c40e
Targets
-
-
Target
37fa8d628b9556c5165e85948e7346991e91d065fe02ea9ade1555098d181ea6
-
Size
410KB
-
MD5
bb5323fb16c41c947829f835693596eb
-
SHA1
07d5b3de1e93aa6ef712da290ccd1fa2c0f95b30
-
SHA256
37fa8d628b9556c5165e85948e7346991e91d065fe02ea9ade1555098d181ea6
-
SHA512
82a2087f224ed0148be6777410b6f92c50e8dd246712fec0b845fd8aeb41d53a8a6be0f80cd18d4ec1f9bd770ce80e54d57434778c51c7c4c3c9a777307ebad9
-
SSDEEP
12288:8CpWEa5PC9Y/+dRpTe/lLOklgYdcYbf7ts:8YoK8+UqklOYbf7e
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
SectopRAT payload
-
Sectoprat family
-