General
-
Target
0f0607c72bddb26fdb2c88f8c70ddba4ea9118d246a1afacba9ae9199822e1c1
-
Size
51KB
-
Sample
241110-3rrvwaxern
-
MD5
0acc8f8d91dd17d652756049ed8be07f
-
SHA1
2f4971cd32b0313d31f9fa64a792e07e803261bd
-
SHA256
0f0607c72bddb26fdb2c88f8c70ddba4ea9118d246a1afacba9ae9199822e1c1
-
SHA512
5ea18e374f3cbc3c96dae3d09edaee50c0cc826ebfd4a5b9fc26c38a7dddb8224d7d52f9e10f5ac790aea8a079d9708a32d5c27627f904cd8255fbf08f71f67d
-
SSDEEP
1536:YouPTlWk9khAqTlF+wBqIKnRF/crbTIxC:Y3PJWkq5JF+wIL0rbGC
Behavioral task
behavioral1
Sample
796dcdb7e373e538e3a70eacbe7f507977796e8f4a04c7c71e7bbdec76059b57.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
796dcdb7e373e538e3a70eacbe7f507977796e8f4a04c7c71e7bbdec76059b57.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
nado
176.113.115.145:4125
-
auth_value
a648e365d8e0df895a84152ad68ffc56
Targets
-
-
Target
796dcdb7e373e538e3a70eacbe7f507977796e8f4a04c7c71e7bbdec76059b57
-
Size
175KB
-
MD5
8637cb9b0ca8b58890c62d9a712c1ae0
-
SHA1
cc331026eebfccd529dc95b39aec2d2fd72e8e2f
-
SHA256
796dcdb7e373e538e3a70eacbe7f507977796e8f4a04c7c71e7bbdec76059b57
-
SHA512
7f2061583db80b969f6886781af03151aa3e2b075d7b41a07d8c12a35c41afdda2160439d2b74ade622e228b2b8fa9a4937cb8a7da96700e0dab5ba03757f90a
-
SSDEEP
3072:yxqZWFFa7E6T825De559yhGfxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+cO:gqZcMUyh
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-