General
-
Target
59cb3df0f7f54b78f667f2070620d3a9661b02505c0d86eb61561306f8025113N.exe
-
Size
371KB
-
Sample
241110-3bbhysxfjg
-
MD5
b057f694b96dd7111f5372012246a7eb
-
SHA1
a8cd78913f9354063712ab118fc715f340db7e4a
-
SHA256
7d6bfccafbc4ce1fa4a5dc94f8c14a29d087fb3a1d7a28cb6c278246a84b51af
-
SHA512
9eb71d3914d8220a9392f1affd9ae93b1b1082e72f58491de3f9b3590f5ff65db0cf54db7f831734d362d9033c9ff9ba7ddff78a88d3ddeaff1e5853db8cf13b
-
SSDEEP
6144:b4p0yN90QEjmKItMqxYrs7l+x0oytsspVrvGjV5lG/qtRco1:Ny90NSSEB+x0ogsspVrvGjPtuo1
Static task
static1
Behavioral task
behavioral1
Sample
59cb3df0f7f54b78f667f2070620d3a9661b02505c0d86eb61561306f8025113N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
most
185.161.248.73:4164
-
auth_value
7da4dfa153f2919e617aa016f7c36008
Targets
-
-
Target
59cb3df0f7f54b78f667f2070620d3a9661b02505c0d86eb61561306f8025113N.exe
-
Size
371KB
-
MD5
b057f694b96dd7111f5372012246a7eb
-
SHA1
a8cd78913f9354063712ab118fc715f340db7e4a
-
SHA256
7d6bfccafbc4ce1fa4a5dc94f8c14a29d087fb3a1d7a28cb6c278246a84b51af
-
SHA512
9eb71d3914d8220a9392f1affd9ae93b1b1082e72f58491de3f9b3590f5ff65db0cf54db7f831734d362d9033c9ff9ba7ddff78a88d3ddeaff1e5853db8cf13b
-
SSDEEP
6144:b4p0yN90QEjmKItMqxYrs7l+x0oytsspVrvGjV5lG/qtRco1:Ny90NSSEB+x0ogsspVrvGjPtuo1
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-