General
-
Target
99cecea9f7f1e9bfbbb489b832f93db660fd2e339358f0e1d9dff3db6283a672
-
Size
410KB
-
Sample
241108-khawwszblm
-
MD5
d39059059a42bcbc990b5e86e2c9d683
-
SHA1
934d2b372c07f1ec5370d1c37633f44dd0eba446
-
SHA256
99cecea9f7f1e9bfbbb489b832f93db660fd2e339358f0e1d9dff3db6283a672
-
SHA512
cd332a0b3df51c28c9cc4110d3d400719a5f6d8429d3c3a0a649a520bc46ca84e6eb9b517dad9fa3cc70a61a4bcfd127976427e6e9d24889d7f46814662df7d1
-
SSDEEP
6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG
Static task
static1
Behavioral task
behavioral1
Sample
99cecea9f7f1e9bfbbb489b832f93db660fd2e339358f0e1d9dff3db6283a672.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
99cecea9f7f1e9bfbbb489b832f93db660fd2e339358f0e1d9dff3db6283a672.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
11
45.9.20.157:46257
-
auth_value
344c26d7f808f9c29e47633026f19aa5
Targets
-
-
Target
99cecea9f7f1e9bfbbb489b832f93db660fd2e339358f0e1d9dff3db6283a672
-
Size
410KB
-
MD5
d39059059a42bcbc990b5e86e2c9d683
-
SHA1
934d2b372c07f1ec5370d1c37633f44dd0eba446
-
SHA256
99cecea9f7f1e9bfbbb489b832f93db660fd2e339358f0e1d9dff3db6283a672
-
SHA512
cd332a0b3df51c28c9cc4110d3d400719a5f6d8429d3c3a0a649a520bc46ca84e6eb9b517dad9fa3cc70a61a4bcfd127976427e6e9d24889d7f46814662df7d1
-
SSDEEP
6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-