General
-
Target
d6249ccfcb60f84ae75b1aff4b0dadc8ba1af63e81927dc41987530b524ea12d
-
Size
428KB
-
Sample
241109-hgw2mazdkh
-
MD5
7bddbbb63352f7d3894e6757339d2edc
-
SHA1
fa95927176743f952776a1ff1e0e0478f62e7317
-
SHA256
d6249ccfcb60f84ae75b1aff4b0dadc8ba1af63e81927dc41987530b524ea12d
-
SHA512
671f36fae6b930455cedafc8b3bf992f0d3d6ebcab77ed1d05b908b34c53a75a2071136fa667ed156bf6c9f6950e8f943fc5b564e643898d19dcee973d12f6f6
-
SSDEEP
6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/
Static task
static1
Behavioral task
behavioral1
Sample
d6249ccfcb60f84ae75b1aff4b0dadc8ba1af63e81927dc41987530b524ea12d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6249ccfcb60f84ae75b1aff4b0dadc8ba1af63e81927dc41987530b524ea12d.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
1
45.9.20.59:46287
-
auth_value
ec6ada170bcec2e72f0e1f3954547f73
Targets
-
-
Target
d6249ccfcb60f84ae75b1aff4b0dadc8ba1af63e81927dc41987530b524ea12d
-
Size
428KB
-
MD5
7bddbbb63352f7d3894e6757339d2edc
-
SHA1
fa95927176743f952776a1ff1e0e0478f62e7317
-
SHA256
d6249ccfcb60f84ae75b1aff4b0dadc8ba1af63e81927dc41987530b524ea12d
-
SHA512
671f36fae6b930455cedafc8b3bf992f0d3d6ebcab77ed1d05b908b34c53a75a2071136fa667ed156bf6c9f6950e8f943fc5b564e643898d19dcee973d12f6f6
-
SSDEEP
6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-