General
-
Target
8970b109835f3ee8cc0d30b2487b7493
-
Size
313KB
-
Sample
241110-279j7azqcn
-
MD5
8970b109835f3ee8cc0d30b2487b7493
-
SHA1
4192bc7276714055afa786e98f45598cc200403e
-
SHA256
43e7f7b03a16cbf8a432a6191197a155e5de9440d2c60ddc570692e1649f9818
-
SHA512
a772fe77ed44e9e20f78c185c6baa704162580b274a13d3b644390a964fb245edeaba1c78ac7eeb4c8ce6a5c8b603b238e9915ca22f9dd075c03fd6e96a0fa70
-
SSDEEP
6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP
Static task
static1
Behavioral task
behavioral1
Sample
8970b109835f3ee8cc0d30b2487b7493.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8970b109835f3ee8cc0d30b2487b7493.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
123
78.153.144.3:2510
-
auth_value
cd6abb0af211bce081d7bf127cc26835
Targets
-
-
Target
8970b109835f3ee8cc0d30b2487b7493
-
Size
313KB
-
MD5
8970b109835f3ee8cc0d30b2487b7493
-
SHA1
4192bc7276714055afa786e98f45598cc200403e
-
SHA256
43e7f7b03a16cbf8a432a6191197a155e5de9440d2c60ddc570692e1649f9818
-
SHA512
a772fe77ed44e9e20f78c185c6baa704162580b274a13d3b644390a964fb245edeaba1c78ac7eeb4c8ce6a5c8b603b238e9915ca22f9dd075c03fd6e96a0fa70
-
SSDEEP
6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-