General
-
Target
992ac788e351a2f48f75378c9784b4a6d482234ac10ebe806f34076ba58b4c50
-
Size
479KB
-
Sample
241109-g13g3sskfj
-
MD5
23adc67e3feef2275360ad317ebf0e6d
-
SHA1
38f536434b99d19c0f117546a2479ef090e4198f
-
SHA256
992ac788e351a2f48f75378c9784b4a6d482234ac10ebe806f34076ba58b4c50
-
SHA512
7b8fbd0b4f1fcb4790ae09344c431fbb75516e48f556225570b3ce7ac8c8cc967cb688fdf3ce21f656f56282e4aaa0727266742141ed277b749502482af0ba32
-
SSDEEP
12288:XMrMy900fhqOX7PUgmg/DoOob702Ax9UPss:ry/f1X7PUpgrop0p9g
Static task
static1
Behavioral task
behavioral1
Sample
992ac788e351a2f48f75378c9784b4a6d482234ac10ebe806f34076ba58b4c50.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
dumud
217.196.96.101:4132
-
auth_value
3e18d4b90418aa3e78d8822e87c62f5c
Targets
-
-
Target
992ac788e351a2f48f75378c9784b4a6d482234ac10ebe806f34076ba58b4c50
-
Size
479KB
-
MD5
23adc67e3feef2275360ad317ebf0e6d
-
SHA1
38f536434b99d19c0f117546a2479ef090e4198f
-
SHA256
992ac788e351a2f48f75378c9784b4a6d482234ac10ebe806f34076ba58b4c50
-
SHA512
7b8fbd0b4f1fcb4790ae09344c431fbb75516e48f556225570b3ce7ac8c8cc967cb688fdf3ce21f656f56282e4aaa0727266742141ed277b749502482af0ba32
-
SSDEEP
12288:XMrMy900fhqOX7PUgmg/DoOob702Ax9UPss:ry/f1X7PUpgrop0p9g
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-