General
-
Target
78d4e14ceddadab140bbc92933887a858442a9c627b660f329f4f00b597c200f
-
Size
479KB
-
Sample
241110-3hb33axdml
-
MD5
8a92ab12196f4ad2ba9f5a3869c2de92
-
SHA1
edf4b3df4da90000e945b070852986971c9f948c
-
SHA256
78d4e14ceddadab140bbc92933887a858442a9c627b660f329f4f00b597c200f
-
SHA512
3e319b709a5178ca9d4510a6b67e20b750287e9a3035d81b20e1fc353c980f3e652b7118034e4818b5b7500fe55de5cf8b2617942b86afbdffe959a861426e42
-
SSDEEP
12288:6MrPy90QnHlmya15PYSVveZaecU5zuNlR:Zy3nHln65PuZTPM
Static task
static1
Behavioral task
behavioral1
Sample
78d4e14ceddadab140bbc92933887a858442a9c627b660f329f4f00b597c200f.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
dumud
217.196.96.101:4132
-
auth_value
3e18d4b90418aa3e78d8822e87c62f5c
Targets
-
-
Target
78d4e14ceddadab140bbc92933887a858442a9c627b660f329f4f00b597c200f
-
Size
479KB
-
MD5
8a92ab12196f4ad2ba9f5a3869c2de92
-
SHA1
edf4b3df4da90000e945b070852986971c9f948c
-
SHA256
78d4e14ceddadab140bbc92933887a858442a9c627b660f329f4f00b597c200f
-
SHA512
3e319b709a5178ca9d4510a6b67e20b750287e9a3035d81b20e1fc353c980f3e652b7118034e4818b5b7500fe55de5cf8b2617942b86afbdffe959a861426e42
-
SSDEEP
12288:6MrPy90QnHlmya15PYSVveZaecU5zuNlR:Zy3nHln65PuZTPM
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-