General
-
Target
8a31b70949ac2dc882117a3f7229255b58b9be2af468a8996a11caf3f300d3a8
-
Size
302KB
-
Sample
241109-exx23sxema
-
MD5
4be14030bdb65fbf47a26a117b0f15c2
-
SHA1
aba3da797a14c9a45459d1afd40db4b0269acdc2
-
SHA256
8a31b70949ac2dc882117a3f7229255b58b9be2af468a8996a11caf3f300d3a8
-
SHA512
21fd52db8cb69ac615527cc97d089667f0b7250e530af72ed97d3666e01013fbe674dec5c2125e5517a141f47f98e7878e1f6b12d05d3ab5c0db347ab9995cb5
-
SSDEEP
3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ
Static task
static1
Behavioral task
behavioral1
Sample
8a31b70949ac2dc882117a3f7229255b58b9be2af468a8996a11caf3f300d3a8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8a31b70949ac2dc882117a3f7229255b58b9be2af468a8996a11caf3f300d3a8.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
11
45.9.20.157:46257
-
auth_value
344c26d7f808f9c29e47633026f19aa5
Targets
-
-
Target
8a31b70949ac2dc882117a3f7229255b58b9be2af468a8996a11caf3f300d3a8
-
Size
302KB
-
MD5
4be14030bdb65fbf47a26a117b0f15c2
-
SHA1
aba3da797a14c9a45459d1afd40db4b0269acdc2
-
SHA256
8a31b70949ac2dc882117a3f7229255b58b9be2af468a8996a11caf3f300d3a8
-
SHA512
21fd52db8cb69ac615527cc97d089667f0b7250e530af72ed97d3666e01013fbe674dec5c2125e5517a141f47f98e7878e1f6b12d05d3ab5c0db347ab9995cb5
-
SSDEEP
3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-