General
-
Target
d5d304f7cc5265ded7d8ca91863dd32ac2f58ba2
-
Size
362KB
-
Sample
241110-1wcweayrdj
-
MD5
b51e8d9551b5ad2a7399146b23470db6
-
SHA1
d5d304f7cc5265ded7d8ca91863dd32ac2f58ba2
-
SHA256
bd58abfe0c844ca630156a8d6fc13931776e1352be365d7840c1358f40800a01
-
SHA512
18cb3bdfd043dcbbf707046f4deeb40128252c1d12bc8c31154d869cac8c964a6c46b4cfa4bf9060edf0642fca589703822cbd2b7f0716407c70fcc9960cf3a8
-
SSDEEP
6144:eTMH0FM6Mb008Jsp9z1Mw+/48QKTUZrZPTHsACne/kzwLZ:B0FM6MY08Jsp9zWO8QKurZP38k
Static task
static1
Behavioral task
behavioral1
Sample
d5d304f7cc5265ded7d8ca91863dd32ac2f58ba2.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d5d304f7cc5265ded7d8ca91863dd32ac2f58ba2.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
RuzkiUNIKALNO
193.233.48.58:38989
-
auth_value
c504b04cfbdd4bf85ce6195bcb37fba6
Targets
-
-
Target
d5d304f7cc5265ded7d8ca91863dd32ac2f58ba2
-
Size
362KB
-
MD5
b51e8d9551b5ad2a7399146b23470db6
-
SHA1
d5d304f7cc5265ded7d8ca91863dd32ac2f58ba2
-
SHA256
bd58abfe0c844ca630156a8d6fc13931776e1352be365d7840c1358f40800a01
-
SHA512
18cb3bdfd043dcbbf707046f4deeb40128252c1d12bc8c31154d869cac8c964a6c46b4cfa4bf9060edf0642fca589703822cbd2b7f0716407c70fcc9960cf3a8
-
SSDEEP
6144:eTMH0FM6Mb008Jsp9z1Mw+/48QKTUZrZPTHsACne/kzwLZ:B0FM6MY08Jsp9zWO8QKurZP38k
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-