General
-
Target
c299582bedc1d180c1b1e7bf19d8a729f4f9ab878fe97fc772cb2b978e9ffdc1
-
Size
480KB
-
Sample
241109-eqyp2awqaz
-
MD5
26088e5f3aa6810bb8480a69e9d16a92
-
SHA1
9afc7c1d12710a1ebe59329be35c567c2ad26436
-
SHA256
c299582bedc1d180c1b1e7bf19d8a729f4f9ab878fe97fc772cb2b978e9ffdc1
-
SHA512
ffd95054ec0f23bf83e4ffcba59346bc0d476d0679097993b0ef1bd188dc64f18b86c267616ddc6102614225cbe4a889b99005c4246d7af61b387ce48f607b33
-
SSDEEP
12288:dMrNy90TMzie5MW1YC6roqEfoDgzopIUBBRgW:gyV5X1dqqoYoTJ
Static task
static1
Behavioral task
behavioral1
Sample
c299582bedc1d180c1b1e7bf19d8a729f4f9ab878fe97fc772cb2b978e9ffdc1.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
dumud
217.196.96.101:4132
-
auth_value
3e18d4b90418aa3e78d8822e87c62f5c
Targets
-
-
Target
c299582bedc1d180c1b1e7bf19d8a729f4f9ab878fe97fc772cb2b978e9ffdc1
-
Size
480KB
-
MD5
26088e5f3aa6810bb8480a69e9d16a92
-
SHA1
9afc7c1d12710a1ebe59329be35c567c2ad26436
-
SHA256
c299582bedc1d180c1b1e7bf19d8a729f4f9ab878fe97fc772cb2b978e9ffdc1
-
SHA512
ffd95054ec0f23bf83e4ffcba59346bc0d476d0679097993b0ef1bd188dc64f18b86c267616ddc6102614225cbe4a889b99005c4246d7af61b387ce48f607b33
-
SSDEEP
12288:dMrNy90TMzie5MW1YC6roqEfoDgzopIUBBRgW:gyV5X1dqqoYoTJ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-