General
-
Target
3edc512aadef1c0269871c08c643729dbc606e605958f86b696fcd5233154edf
-
Size
175KB
-
Sample
241110-1nvq9awbmn
-
MD5
ceb7b1d7ca7adf4eb8b3ea66b4b5db88
-
SHA1
1554e88c063a3c62b9f4052384e09ec27bcc2004
-
SHA256
3edc512aadef1c0269871c08c643729dbc606e605958f86b696fcd5233154edf
-
SHA512
21c4a496a464f778cbdb16f981dbe593d5f8086360bc8f99757c9dba9504679b75e92fe1054393d50249e1e5fd163b15c84e2783b493d83b766fd0f45188193d
-
SSDEEP
3072:BxqZW11a2kX8fkRyeiBWep3FhhFvxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOf:zqZkkgN1hh
Behavioral task
behavioral1
Sample
3edc512aadef1c0269871c08c643729dbc606e605958f86b696fcd5233154edf.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3edc512aadef1c0269871c08c643729dbc606e605958f86b696fcd5233154edf.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
fabio
193.233.20.27:4123
-
auth_value
56b82736c3f56b13be8e64c87d2cf9e5
Targets
-
-
Target
3edc512aadef1c0269871c08c643729dbc606e605958f86b696fcd5233154edf
-
Size
175KB
-
MD5
ceb7b1d7ca7adf4eb8b3ea66b4b5db88
-
SHA1
1554e88c063a3c62b9f4052384e09ec27bcc2004
-
SHA256
3edc512aadef1c0269871c08c643729dbc606e605958f86b696fcd5233154edf
-
SHA512
21c4a496a464f778cbdb16f981dbe593d5f8086360bc8f99757c9dba9504679b75e92fe1054393d50249e1e5fd163b15c84e2783b493d83b766fd0f45188193d
-
SSDEEP
3072:BxqZW11a2kX8fkRyeiBWep3FhhFvxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOf:zqZkkgN1hh
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-