General
-
Target
df0bb31a2aa6bd0254cc02a7160e090192fabc606a7f0189eecf30df402acc46
-
Size
407KB
-
Sample
241109-y44b8atrak
-
MD5
fa95636445752289cd4b86b4122e4538
-
SHA1
8d3a26f4bce2c20fb442074d795a0c7caaa934f6
-
SHA256
df0bb31a2aa6bd0254cc02a7160e090192fabc606a7f0189eecf30df402acc46
-
SHA512
29b81e1b4e95b5898cf4360a38c4019a1ad88fb1d4d9a2070a64c13f0741edf73adeebb94841f3ca63949e09e19b96fecc626efbe748259c250b21be780e24ae
-
SSDEEP
12288:ERZdBcxEbpzn2iUd2HgmM7LO4qlY6R1tTWFm:+bpjHqi9R3TWU
Static task
static1
Behavioral task
behavioral1
Sample
df0bb31a2aa6bd0254cc02a7160e090192fabc606a7f0189eecf30df402acc46.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df0bb31a2aa6bd0254cc02a7160e090192fabc606a7f0189eecf30df402acc46.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
ww
193.106.191.67:44400
-
auth_value
5a1b28ccd05953f5c3f99729c12427cc
Targets
-
-
Target
df0bb31a2aa6bd0254cc02a7160e090192fabc606a7f0189eecf30df402acc46
-
Size
407KB
-
MD5
fa95636445752289cd4b86b4122e4538
-
SHA1
8d3a26f4bce2c20fb442074d795a0c7caaa934f6
-
SHA256
df0bb31a2aa6bd0254cc02a7160e090192fabc606a7f0189eecf30df402acc46
-
SHA512
29b81e1b4e95b5898cf4360a38c4019a1ad88fb1d4d9a2070a64c13f0741edf73adeebb94841f3ca63949e09e19b96fecc626efbe748259c250b21be780e24ae
-
SSDEEP
12288:ERZdBcxEbpzn2iUd2HgmM7LO4qlY6R1tTWFm:+bpjHqi9R3TWU
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-