General
-
Target
5cea2df0fce14f97e89ac3982feb2e994075fd210404a18615f5f2e1cad21770
-
Size
479KB
-
Sample
241109-ckjmtatqat
-
MD5
0d250d81605513fccbd3b24cf40a3e49
-
SHA1
a10851cb7152c4bfc4215693f166e3950d1630f4
-
SHA256
5cea2df0fce14f97e89ac3982feb2e994075fd210404a18615f5f2e1cad21770
-
SHA512
275baae7ed9708fc3708b1dcdf98d5482267dc19c1dd0631d170541d6e74910b59ff4e9321a2dff3fe6c98680a50e005d71f5c1e35072a39abb0d33c2aac8ffa
-
SSDEEP
12288:yMrky905Btij5ctPhLqM/V8OlntIhpne:6ygBwVyqWNlnyhA
Static task
static1
Behavioral task
behavioral1
Sample
5cea2df0fce14f97e89ac3982feb2e994075fd210404a18615f5f2e1cad21770.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
dumud
217.196.96.101:4132
-
auth_value
3e18d4b90418aa3e78d8822e87c62f5c
Targets
-
-
Target
5cea2df0fce14f97e89ac3982feb2e994075fd210404a18615f5f2e1cad21770
-
Size
479KB
-
MD5
0d250d81605513fccbd3b24cf40a3e49
-
SHA1
a10851cb7152c4bfc4215693f166e3950d1630f4
-
SHA256
5cea2df0fce14f97e89ac3982feb2e994075fd210404a18615f5f2e1cad21770
-
SHA512
275baae7ed9708fc3708b1dcdf98d5482267dc19c1dd0631d170541d6e74910b59ff4e9321a2dff3fe6c98680a50e005d71f5c1e35072a39abb0d33c2aac8ffa
-
SSDEEP
12288:yMrky905Btij5ctPhLqM/V8OlntIhpne:6ygBwVyqWNlnyhA
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-