General
-
Target
eca1157eb3441cb134c8bfa3486992ba37cd0e029cecb98f207a029b25d67ad3
-
Size
750KB
-
Sample
241109-kb9fwa1emp
-
MD5
63766cdaac6bdbacb9dd44c69c6288a1
-
SHA1
af56117996cd2969a338e84e5f14fd0914af54f6
-
SHA256
eca1157eb3441cb134c8bfa3486992ba37cd0e029cecb98f207a029b25d67ad3
-
SHA512
2d848452c1daaf1ba91cb394a0d6c90e13ed9a094851eb44ec68a7bd1c7bacd7f56a805f96df43f442b8d93a7adeae67380888b5f4cb978cfde6557a9c592933
-
SSDEEP
12288:sMr/y90qWTcxbYRAwpZ+IEfWbmyOki03FrnhR5E5f5pDyV7ZWxUd7v+z0pAHzoP:ryZoyURAkESbhHKfjGNIsL+kAzy
Static task
static1
Behavioral task
behavioral1
Sample
eca1157eb3441cb134c8bfa3486992ba37cd0e029cecb98f207a029b25d67ad3.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
dars
83.97.73.127:19045
-
auth_value
7cd208e6b6c927262304d5d4d88647fd
Targets
-
-
Target
eca1157eb3441cb134c8bfa3486992ba37cd0e029cecb98f207a029b25d67ad3
-
Size
750KB
-
MD5
63766cdaac6bdbacb9dd44c69c6288a1
-
SHA1
af56117996cd2969a338e84e5f14fd0914af54f6
-
SHA256
eca1157eb3441cb134c8bfa3486992ba37cd0e029cecb98f207a029b25d67ad3
-
SHA512
2d848452c1daaf1ba91cb394a0d6c90e13ed9a094851eb44ec68a7bd1c7bacd7f56a805f96df43f442b8d93a7adeae67380888b5f4cb978cfde6557a9c592933
-
SSDEEP
12288:sMr/y90qWTcxbYRAwpZ+IEfWbmyOki03FrnhR5E5f5pDyV7ZWxUd7v+z0pAHzoP:ryZoyURAkESbhHKfjGNIsL+kAzy
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-