General
-
Target
8ec469d0e013773de3329fb50e6d8a3ab692345863a992e69e73def9f11fe996
-
Size
272KB
-
Sample
241109-1gzrmasgqa
-
MD5
18a6829ecaa02bcba1acd9b829240e48
-
SHA1
a17ed48de9ed9048370e16f8c486ac8847d01db8
-
SHA256
8ec469d0e013773de3329fb50e6d8a3ab692345863a992e69e73def9f11fe996
-
SHA512
6dc3b2281a9f391e3b9b9a0f38aee4c908968ec57ff5e820e6b24ed4dce02d2178c6dbe059cb29e8cf81adb5fbae3057f19db696d3a538a90b168d5735bd8a16
-
SSDEEP
3072:ow6jYELp6VFxC2lS2H0onEyGKH5miQo40s0CGzhF3lnI2gfxNn2pU9f2MKTV/wiv:ow6j+l8whnTGKZm4HzhrnI
Behavioral task
behavioral1
Sample
8ec469d0e013773de3329fb50e6d8a3ab692345863a992e69e73def9f11fe996.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8ec469d0e013773de3329fb50e6d8a3ab692345863a992e69e73def9f11fe996.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
ronur
193.233.20.20:4134
-
auth_value
f88f86755a528d4b25f6f3628c460965
Targets
-
-
Target
8ec469d0e013773de3329fb50e6d8a3ab692345863a992e69e73def9f11fe996
-
Size
272KB
-
MD5
18a6829ecaa02bcba1acd9b829240e48
-
SHA1
a17ed48de9ed9048370e16f8c486ac8847d01db8
-
SHA256
8ec469d0e013773de3329fb50e6d8a3ab692345863a992e69e73def9f11fe996
-
SHA512
6dc3b2281a9f391e3b9b9a0f38aee4c908968ec57ff5e820e6b24ed4dce02d2178c6dbe059cb29e8cf81adb5fbae3057f19db696d3a538a90b168d5735bd8a16
-
SSDEEP
3072:ow6jYELp6VFxC2lS2H0onEyGKH5miQo40s0CGzhF3lnI2gfxNn2pU9f2MKTV/wiv:ow6j+l8whnTGKZm4HzhrnI
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-