General
-
Target
fb1766d49fd9a005a134a1a37d48176dc951965374fb81d13b37959e0a99167f
-
Size
128KB
-
Sample
241110-11kf2swhme
-
MD5
51d41ac219fdec25739bc553be498753
-
SHA1
f31959cebe7a2070590542bf2eb7fc09a9dc76e8
-
SHA256
fb1766d49fd9a005a134a1a37d48176dc951965374fb81d13b37959e0a99167f
-
SHA512
c7872429234c6c3084796af6f776ef25ce0b66c2461aefa4833e65ebc9df89e9409a85b287df125d12978565fefc1e1ea850f13fda965052291c3ec13e7bf73d
-
SSDEEP
3072:7cvFBgCYepi2IhzgDkW1LUKxQcnDjDThn4EASNj:7cvOLRW1IKKcTThn4jS
Behavioral task
behavioral1
Sample
fb1766d49fd9a005a134a1a37d48176dc951965374fb81d13b37959e0a99167f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb1766d49fd9a005a134a1a37d48176dc951965374fb81d13b37959e0a99167f.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
2508
janolavave.xyz:80
-
auth_value
83b4fac9567e0b85d3ed626fd5a68358
Targets
-
-
Target
fb1766d49fd9a005a134a1a37d48176dc951965374fb81d13b37959e0a99167f
-
Size
128KB
-
MD5
51d41ac219fdec25739bc553be498753
-
SHA1
f31959cebe7a2070590542bf2eb7fc09a9dc76e8
-
SHA256
fb1766d49fd9a005a134a1a37d48176dc951965374fb81d13b37959e0a99167f
-
SHA512
c7872429234c6c3084796af6f776ef25ce0b66c2461aefa4833e65ebc9df89e9409a85b287df125d12978565fefc1e1ea850f13fda965052291c3ec13e7bf73d
-
SSDEEP
3072:7cvFBgCYepi2IhzgDkW1LUKxQcnDjDThn4EASNj:7cvOLRW1IKKcTThn4jS
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-