General
-
Target
c058688bb6e97427d20814b654291f092efb3ff6ee4a588bcfeda27fe83ab2e3
-
Size
474KB
-
Sample
241109-ze9y5s1kg1
-
MD5
d1a80bae4fe7ec3642f37028a60d8499
-
SHA1
3f05036af86276ca7cbe84bbbf9ca7dcb2e97f09
-
SHA256
c058688bb6e97427d20814b654291f092efb3ff6ee4a588bcfeda27fe83ab2e3
-
SHA512
2a8a0306ce0d6f06629fa2dbb73cc9e4afc33940d968ad3afdcfd3e7a1b89fd6845c1c45b70703bb997527b999a5c2c5ce0d23212e6de556c87c9172df93d96a
-
SSDEEP
12288:NMrEy90bGjIxnG32FPElWkTvYKQJ3QlrUw0hs:Vy4GInIaElWbL3QR
Static task
static1
Behavioral task
behavioral1
Sample
c058688bb6e97427d20814b654291f092efb3ff6ee4a588bcfeda27fe83ab2e3.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
fusa
193.233.20.12:4132
-
auth_value
a08b2f01bd2af756e38c5dd60e87e697
Targets
-
-
Target
c058688bb6e97427d20814b654291f092efb3ff6ee4a588bcfeda27fe83ab2e3
-
Size
474KB
-
MD5
d1a80bae4fe7ec3642f37028a60d8499
-
SHA1
3f05036af86276ca7cbe84bbbf9ca7dcb2e97f09
-
SHA256
c058688bb6e97427d20814b654291f092efb3ff6ee4a588bcfeda27fe83ab2e3
-
SHA512
2a8a0306ce0d6f06629fa2dbb73cc9e4afc33940d968ad3afdcfd3e7a1b89fd6845c1c45b70703bb997527b999a5c2c5ce0d23212e6de556c87c9172df93d96a
-
SSDEEP
12288:NMrEy90bGjIxnG32FPElWkTvYKQJ3QlrUw0hs:Vy4GInIaElWbL3QR
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-