General
-
Target
1016448ad3c9e49b68c1482f07b9f5b62ac798688218baafa5b62f88f8ba8414
-
Size
1.1MB
-
Sample
241109-jvdymszmew
-
MD5
9c56801da6f20973918fb650ebfe76a3
-
SHA1
5d1b0120969000a88f8bc4aad718bd88525afa52
-
SHA256
1016448ad3c9e49b68c1482f07b9f5b62ac798688218baafa5b62f88f8ba8414
-
SHA512
e97e55b4827173cf3a434ec10e3a230ac9a8179f32b3421056fbf89ee9a425e28d232894c2848d4ba61c3da6e97e1a0418328c955b84fde2ef7e8fc01f848856
-
SSDEEP
24576:vysmqPXE8dyQ6sEsPZbXMdYzrODNsms+4YJP947/z/mpd86rx93Vtr:6smqMnsEGbXoWr+sx6JFIjmptvV
Static task
static1
Behavioral task
behavioral1
Sample
1016448ad3c9e49b68c1482f07b9f5b62ac798688218baafa5b62f88f8ba8414.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
doma
185.161.248.75:4132
-
auth_value
8be53af7f78567706928d0abef953ef4
Targets
-
-
Target
1016448ad3c9e49b68c1482f07b9f5b62ac798688218baafa5b62f88f8ba8414
-
Size
1.1MB
-
MD5
9c56801da6f20973918fb650ebfe76a3
-
SHA1
5d1b0120969000a88f8bc4aad718bd88525afa52
-
SHA256
1016448ad3c9e49b68c1482f07b9f5b62ac798688218baafa5b62f88f8ba8414
-
SHA512
e97e55b4827173cf3a434ec10e3a230ac9a8179f32b3421056fbf89ee9a425e28d232894c2848d4ba61c3da6e97e1a0418328c955b84fde2ef7e8fc01f848856
-
SSDEEP
24576:vysmqPXE8dyQ6sEsPZbXMdYzrODNsms+4YJP947/z/mpd86rx93Vtr:6smqMnsEGbXoWr+sx6JFIjmptvV
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-