General
-
Target
a4d66fce0c5d7dccb3d986e8240da2959efbe9642cd35f4b47ab6160930c5d8e
-
Size
1.1MB
-
Sample
241108-ssbj6sxkcm
-
MD5
707f44af2cebbc7d86bb4ab761c76544
-
SHA1
6fef1f5cf566c3e243d55fc0db22960c98931356
-
SHA256
a4d66fce0c5d7dccb3d986e8240da2959efbe9642cd35f4b47ab6160930c5d8e
-
SHA512
43b02d6cf12a5222923a785c8a63d0741e85403e296dd99ca12d22dbe5f56e2bc14b5e128ae8dd012f152917a73c1074bfba281fa38ad301e6b7168b9383e809
-
SSDEEP
24576:Iy1A0uzpB4KVk+GXb5kaKH4sjeIlcFYuOVEJwSP4q:PS0uFBT14b5NpsjeIbEJwSQ
Static task
static1
Behavioral task
behavioral1
Sample
a4d66fce0c5d7dccb3d986e8240da2959efbe9642cd35f4b47ab6160930c5d8e.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
doma
185.161.248.75:4132
-
auth_value
8be53af7f78567706928d0abef953ef4
Targets
-
-
Target
a4d66fce0c5d7dccb3d986e8240da2959efbe9642cd35f4b47ab6160930c5d8e
-
Size
1.1MB
-
MD5
707f44af2cebbc7d86bb4ab761c76544
-
SHA1
6fef1f5cf566c3e243d55fc0db22960c98931356
-
SHA256
a4d66fce0c5d7dccb3d986e8240da2959efbe9642cd35f4b47ab6160930c5d8e
-
SHA512
43b02d6cf12a5222923a785c8a63d0741e85403e296dd99ca12d22dbe5f56e2bc14b5e128ae8dd012f152917a73c1074bfba281fa38ad301e6b7168b9383e809
-
SSDEEP
24576:Iy1A0uzpB4KVk+GXb5kaKH4sjeIlcFYuOVEJwSP4q:PS0uFBT14b5NpsjeIbEJwSQ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-