General
-
Target
6763820f80ac6ec7001790ee14bd3d819e58a0de7778dc8056938d30016e7a5a
-
Size
479KB
-
Sample
241110-3v89bsxkht
-
MD5
6984679bedc28d34366900bea303f36a
-
SHA1
809825a74cbf5369aeca55bcb2ee6a27d975ff93
-
SHA256
6763820f80ac6ec7001790ee14bd3d819e58a0de7778dc8056938d30016e7a5a
-
SHA512
f0bfedebbedc7f1a3ea55f4c5a69a85beaaae894249fdbfd1f381ce7228f635884b7095aab2b9fe0e6efc44d82fa4b9ecc37ce9ccf10594b7cb4a6ecfbe7fad3
-
SSDEEP
12288:MMrcy90Ax1OYdUHck+NJOrIVZTPW21lXBTGVu3L3Poc:AyTT7zNXsATPW21lXBQcp
Static task
static1
Behavioral task
behavioral1
Sample
6763820f80ac6ec7001790ee14bd3d819e58a0de7778dc8056938d30016e7a5a.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
diwer
217.196.96.101:4132
-
auth_value
42abfa9e4f2e290c8bdbc776fd9bb6ad
Targets
-
-
Target
6763820f80ac6ec7001790ee14bd3d819e58a0de7778dc8056938d30016e7a5a
-
Size
479KB
-
MD5
6984679bedc28d34366900bea303f36a
-
SHA1
809825a74cbf5369aeca55bcb2ee6a27d975ff93
-
SHA256
6763820f80ac6ec7001790ee14bd3d819e58a0de7778dc8056938d30016e7a5a
-
SHA512
f0bfedebbedc7f1a3ea55f4c5a69a85beaaae894249fdbfd1f381ce7228f635884b7095aab2b9fe0e6efc44d82fa4b9ecc37ce9ccf10594b7cb4a6ecfbe7fad3
-
SSDEEP
12288:MMrcy90Ax1OYdUHck+NJOrIVZTPW21lXBTGVu3L3Poc:AyTT7zNXsATPW21lXBQcp
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-