General
-
Target
38d92ea6106e3ba847d45816c6381044cee6f13d
-
Size
385KB
-
Sample
241110-3gpmrswraz
-
MD5
458e882fefd902273e3be00aa832ddf0
-
SHA1
38d92ea6106e3ba847d45816c6381044cee6f13d
-
SHA256
27fddd3467552e63a4cdf732d22549c0e3c3aa3e95a9931762c324aaa330601e
-
SHA512
c4e26c85cb8da28cff1abf21d6504b14a76e71ab802850366c82e4658396bfcab58c0f0c521425b56a902a2a1564a46b2b5ef418ceb1daa12d2aa9b8832f27a9
-
SSDEEP
6144:LVIUmj5tOmPZa4UefSL93f6fHdOizqBCI8L0B7y5PEm8:LVInj5gmRV83f6f9OUdZoln
Static task
static1
Behavioral task
behavioral1
Sample
38d92ea6106e3ba847d45816c6381044cee6f13d.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
38d92ea6106e3ba847d45816c6381044cee6f13d.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
RuzkiUNIKALNO
193.233.48.58:38989
-
auth_value
c504b04cfbdd4bf85ce6195bcb37fba6
Targets
-
-
Target
38d92ea6106e3ba847d45816c6381044cee6f13d
-
Size
385KB
-
MD5
458e882fefd902273e3be00aa832ddf0
-
SHA1
38d92ea6106e3ba847d45816c6381044cee6f13d
-
SHA256
27fddd3467552e63a4cdf732d22549c0e3c3aa3e95a9931762c324aaa330601e
-
SHA512
c4e26c85cb8da28cff1abf21d6504b14a76e71ab802850366c82e4658396bfcab58c0f0c521425b56a902a2a1564a46b2b5ef418ceb1daa12d2aa9b8832f27a9
-
SSDEEP
6144:LVIUmj5tOmPZa4UefSL93f6fHdOizqBCI8L0B7y5PEm8:LVInj5gmRV83f6f9OUdZoln
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-