General
-
Target
b1d798b9cdb1c09f40c017786fe12cdbd339e0db079b132443e02eaeafbbf0a2
-
Size
428KB
-
Sample
241108-w8gmxaxdrq
-
MD5
83cbfa97921f44ac08d3434a082d3935
-
SHA1
1db22f4c7edbeaeb73ea8baca665becfe816028f
-
SHA256
b1d798b9cdb1c09f40c017786fe12cdbd339e0db079b132443e02eaeafbbf0a2
-
SHA512
115165f781c2472d7a9fcb077721697e3c0c91090984622ea4114f7e58e20839c731e0b9f9fd677de57b3dbf2fc3b7b65e8bc5b7c025915faf092accfd724c49
-
SSDEEP
6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/
Static task
static1
Behavioral task
behavioral1
Sample
b1d798b9cdb1c09f40c017786fe12cdbd339e0db079b132443e02eaeafbbf0a2.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
b1d798b9cdb1c09f40c017786fe12cdbd339e0db079b132443e02eaeafbbf0a2.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
1
45.9.20.59:46287
-
auth_value
ec6ada170bcec2e72f0e1f3954547f73
Targets
-
-
Target
b1d798b9cdb1c09f40c017786fe12cdbd339e0db079b132443e02eaeafbbf0a2
-
Size
428KB
-
MD5
83cbfa97921f44ac08d3434a082d3935
-
SHA1
1db22f4c7edbeaeb73ea8baca665becfe816028f
-
SHA256
b1d798b9cdb1c09f40c017786fe12cdbd339e0db079b132443e02eaeafbbf0a2
-
SHA512
115165f781c2472d7a9fcb077721697e3c0c91090984622ea4114f7e58e20839c731e0b9f9fd677de57b3dbf2fc3b7b65e8bc5b7c025915faf092accfd724c49
-
SSDEEP
6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-