General
-
Target
b4370593803bed8c15f9cf2e91a9667fbd8855440a0e48f563a8c65915e6b995
-
Size
272KB
-
Sample
241110-194laawgjk
-
MD5
52a9791b4c5c0c70fe25893ba7b4e34b
-
SHA1
7cdb03b2275856a7795d1bfb1eca59981621d528
-
SHA256
b4370593803bed8c15f9cf2e91a9667fbd8855440a0e48f563a8c65915e6b995
-
SHA512
e58fbe3c355d78d1d6ab59864dcbf508734304a4ba5b1657dc9dcae993950a5c9f385040515f35b21d1df4a4039882ba29bbab680ab273f5e0fb4012bc71ec23
-
SSDEEP
3072:p6j4ELH6Vt7CENpmh6sLKR+utY/edHbpiWo40mTJghm0nlQoYKgQmExNn2pU9f2O:p6jgppZsLKwuAexbpZghdnlQH5Q
Behavioral task
behavioral1
Sample
b4370593803bed8c15f9cf2e91a9667fbd8855440a0e48f563a8c65915e6b995.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b4370593803bed8c15f9cf2e91a9667fbd8855440a0e48f563a8c65915e6b995.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
romik
193.233.20.12:4132
-
auth_value
8fb78d2889ba0ca42678b59b884e88ff
Targets
-
-
Target
b4370593803bed8c15f9cf2e91a9667fbd8855440a0e48f563a8c65915e6b995
-
Size
272KB
-
MD5
52a9791b4c5c0c70fe25893ba7b4e34b
-
SHA1
7cdb03b2275856a7795d1bfb1eca59981621d528
-
SHA256
b4370593803bed8c15f9cf2e91a9667fbd8855440a0e48f563a8c65915e6b995
-
SHA512
e58fbe3c355d78d1d6ab59864dcbf508734304a4ba5b1657dc9dcae993950a5c9f385040515f35b21d1df4a4039882ba29bbab680ab273f5e0fb4012bc71ec23
-
SSDEEP
3072:p6j4ELH6Vt7CENpmh6sLKR+utY/edHbpiWo40mTJghm0nlQoYKgQmExNn2pU9f2O:p6jgppZsLKwuAexbpZghdnlQH5Q
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-