General
-
Target
188040d9281fdffd5d7d2484c4020cb33ca4fb5f9ff9b96b2a3d6229f8b85012
-
Size
371KB
-
Sample
241109-xqftbszfpp
-
MD5
abaa8fb4e9073c92fe71ebcdf9675f6b
-
SHA1
0a12d6dac26197dca4faabd7a7a00f68e01a1231
-
SHA256
188040d9281fdffd5d7d2484c4020cb33ca4fb5f9ff9b96b2a3d6229f8b85012
-
SHA512
21360c20baae834d649879e377c935e6804d486edabc54423e75dea6dfa8203e5ce546b69bbb9d35b33206cd3ff53b8881ddadb19a88ef5c4017790882e8fa1f
-
SSDEEP
6144:I1c95HIATYxl4z3GTkAe0YnGDw2IKcO/w+XiILU6dqb7ITsqXigaXwVfi:I1c95H7TYrCYkAepCw2oOI4kL7R
Static task
static1
Behavioral task
behavioral1
Sample
188040d9281fdffd5d7d2484c4020cb33ca4fb5f9ff9b96b2a3d6229f8b85012.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
188040d9281fdffd5d7d2484c4020cb33ca4fb5f9ff9b96b2a3d6229f8b85012.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
1
45.9.20.59:46287
-
auth_value
ec6ada170bcec2e72f0e1f3954547f73
Targets
-
-
Target
188040d9281fdffd5d7d2484c4020cb33ca4fb5f9ff9b96b2a3d6229f8b85012
-
Size
371KB
-
MD5
abaa8fb4e9073c92fe71ebcdf9675f6b
-
SHA1
0a12d6dac26197dca4faabd7a7a00f68e01a1231
-
SHA256
188040d9281fdffd5d7d2484c4020cb33ca4fb5f9ff9b96b2a3d6229f8b85012
-
SHA512
21360c20baae834d649879e377c935e6804d486edabc54423e75dea6dfa8203e5ce546b69bbb9d35b33206cd3ff53b8881ddadb19a88ef5c4017790882e8fa1f
-
SSDEEP
6144:I1c95HIATYxl4z3GTkAe0YnGDw2IKcO/w+XiILU6dqb7ITsqXigaXwVfi:I1c95H7TYrCYkAepCw2oOI4kL7R
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-