General
-
Target
b8759b45a3a040536cda03f0a5bdc1850b58d71a91154f278bbcd158b966eefc
-
Size
1.1MB
-
Sample
241108-m5ngls1eqm
-
MD5
2f52337c3546433b9a391e704b652f49
-
SHA1
e4c818132b5e30c79406e1f38c8fe267f6267aef
-
SHA256
b8759b45a3a040536cda03f0a5bdc1850b58d71a91154f278bbcd158b966eefc
-
SHA512
9a6ae4897686bfc0988b3856e7904943a6653264a2df4fd4afe910250eaa115c6464c762ef635f3d189bfdb1ae78789965e8a652620f2dfd23d8da37d14bd183
-
SSDEEP
24576:JyLq9Yqv0TazkmqNqLXq9yRn1xtlUf6BRH7b+cfXX:8LWR0eAmq0+9yF1xtlUCBRH7b+cfX
Static task
static1
Behavioral task
behavioral1
Sample
b8759b45a3a040536cda03f0a5bdc1850b58d71a91154f278bbcd158b966eefc.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
doma
185.161.248.75:4132
-
auth_value
8be53af7f78567706928d0abef953ef4
Targets
-
-
Target
b8759b45a3a040536cda03f0a5bdc1850b58d71a91154f278bbcd158b966eefc
-
Size
1.1MB
-
MD5
2f52337c3546433b9a391e704b652f49
-
SHA1
e4c818132b5e30c79406e1f38c8fe267f6267aef
-
SHA256
b8759b45a3a040536cda03f0a5bdc1850b58d71a91154f278bbcd158b966eefc
-
SHA512
9a6ae4897686bfc0988b3856e7904943a6653264a2df4fd4afe910250eaa115c6464c762ef635f3d189bfdb1ae78789965e8a652620f2dfd23d8da37d14bd183
-
SSDEEP
24576:JyLq9Yqv0TazkmqNqLXq9yRn1xtlUf6BRH7b+cfXX:8LWR0eAmq0+9yF1xtlUCBRH7b+cfX
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-