General
-
Target
70b6ba81862e1956d45e7db5e074813a51a80553ed33268743265e46a3cd967e.exe
-
Size
295KB
-
Sample
241110-1vvd3ayrcj
-
MD5
b12ab92f9082ee385f9c97ea323024bb
-
SHA1
8e836b6c36fe75533a68795a5cf5fe47a6cf4c99
-
SHA256
70b6ba81862e1956d45e7db5e074813a51a80553ed33268743265e46a3cd967e
-
SHA512
98b9a379ca4e24286f8ba90868b1d1724f0de7c7e7f2c2a10c134d4dd189268f2b4d6b1e24245bf768527c161dc37979d6ed0e74c0b17e244262e82ab966d2a0
-
SSDEEP
6144:YqhxOt5cQrAB+DO320DhCWqElzmNfG0ftpVjujf08nW:FhUt5cQrw+GhCIJ0ft/juI8W
Static task
static1
Behavioral task
behavioral1
Sample
70b6ba81862e1956d45e7db5e074813a51a80553ed33268743265e46a3cd967e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
70b6ba81862e1956d45e7db5e074813a51a80553ed33268743265e46a3cd967e.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
rosn
176.113.115.145:4125
-
auth_value
050a19e1db4d0024b0f23b37dcf961f4
Targets
-
-
Target
70b6ba81862e1956d45e7db5e074813a51a80553ed33268743265e46a3cd967e.exe
-
Size
295KB
-
MD5
b12ab92f9082ee385f9c97ea323024bb
-
SHA1
8e836b6c36fe75533a68795a5cf5fe47a6cf4c99
-
SHA256
70b6ba81862e1956d45e7db5e074813a51a80553ed33268743265e46a3cd967e
-
SHA512
98b9a379ca4e24286f8ba90868b1d1724f0de7c7e7f2c2a10c134d4dd189268f2b4d6b1e24245bf768527c161dc37979d6ed0e74c0b17e244262e82ab966d2a0
-
SSDEEP
6144:YqhxOt5cQrAB+DO320DhCWqElzmNfG0ftpVjujf08nW:FhUt5cQrw+GhCIJ0ft/juI8W
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-