General
-
Target
0d1a20c8e11356c36311dd4cdf47e546ed85fe62
-
Size
449KB
-
Sample
241110-1573xawkgs
-
MD5
e26527d9da43176f27f8d3f52e0052d8
-
SHA1
0d1a20c8e11356c36311dd4cdf47e546ed85fe62
-
SHA256
073c76f54b83aea6de3be5c6cb1bf40a6c7bf4caddd37c6755c2719daf5fd399
-
SHA512
001e0b657eb9b17d7983f3c181f62f7eb15ab2f6ee8e670e4c8fcfcc9a3d0ebb12af004412a7d5f5ad8d315b9612c8dbb7939b4a3f9f38006e68508a20a2a81a
-
SSDEEP
12288:93gN5CAoWLUcJzYzwW0T9M6K9onLx0WcBM:HAoWoOW0hM6TnLxMM
Static task
static1
Behavioral task
behavioral1
Sample
0d1a20c8e11356c36311dd4cdf47e546ed85fe62.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d1a20c8e11356c36311dd4cdf47e546ed85fe62.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
ww
193.106.191.67:44400
-
auth_value
5a1b28ccd05953f5c3f99729c12427cc
Targets
-
-
Target
0d1a20c8e11356c36311dd4cdf47e546ed85fe62
-
Size
449KB
-
MD5
e26527d9da43176f27f8d3f52e0052d8
-
SHA1
0d1a20c8e11356c36311dd4cdf47e546ed85fe62
-
SHA256
073c76f54b83aea6de3be5c6cb1bf40a6c7bf4caddd37c6755c2719daf5fd399
-
SHA512
001e0b657eb9b17d7983f3c181f62f7eb15ab2f6ee8e670e4c8fcfcc9a3d0ebb12af004412a7d5f5ad8d315b9612c8dbb7939b4a3f9f38006e68508a20a2a81a
-
SSDEEP
12288:93gN5CAoWLUcJzYzwW0T9M6K9onLx0WcBM:HAoWoOW0hM6TnLxMM
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-