General
-
Target
c4372a008ed59c20e52211d81cbbe713b578433e29b27f7ada73ede9977c86f8
-
Size
1.5MB
-
Sample
241109-x7w7mstkgq
-
MD5
e83e1f22263cfc5cc68020e8679ec350
-
SHA1
cda05c2a0e673559a04e57a87f76820104b59417
-
SHA256
c4372a008ed59c20e52211d81cbbe713b578433e29b27f7ada73ede9977c86f8
-
SHA512
ed8581b16910432e465f937ddce7c7ca37f7fa77caa0e7bc49c4b2e6262357555b74d1685f8b7ba962657c1382375e2353afae93126c39aba471567b4392c78e
-
SSDEEP
24576:fyYjob4lkLuPtybLGdYVv3ZdqP3vkU+K5MMMIMD8hQZAyDkZSWUs7pxT+xw:qYfbP4zhZdqPsU+K+FrDJ/RpuP+x
Static task
static1
Behavioral task
behavioral1
Sample
c4372a008ed59c20e52211d81cbbe713b578433e29b27f7ada73ede9977c86f8.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
most
185.161.248.73:4164
-
auth_value
7da4dfa153f2919e617aa016f7c36008
Targets
-
-
Target
c4372a008ed59c20e52211d81cbbe713b578433e29b27f7ada73ede9977c86f8
-
Size
1.5MB
-
MD5
e83e1f22263cfc5cc68020e8679ec350
-
SHA1
cda05c2a0e673559a04e57a87f76820104b59417
-
SHA256
c4372a008ed59c20e52211d81cbbe713b578433e29b27f7ada73ede9977c86f8
-
SHA512
ed8581b16910432e465f937ddce7c7ca37f7fa77caa0e7bc49c4b2e6262357555b74d1685f8b7ba962657c1382375e2353afae93126c39aba471567b4392c78e
-
SSDEEP
24576:fyYjob4lkLuPtybLGdYVv3ZdqP3vkU+K5MMMIMD8hQZAyDkZSWUs7pxT+xw:qYfbP4zhZdqPsU+K+FrDJ/RpuP+x
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-