General
-
Target
17b5d9e15b331732347451ae94352351975529ed0ecb71e518dec14377cdec7d
-
Size
479KB
-
Sample
241110-3w9w9axfqn
-
MD5
fd379066bd61ac2c6b5ab1562982c56a
-
SHA1
a9eb72854992390c6abd56617366df785ec1a709
-
SHA256
17b5d9e15b331732347451ae94352351975529ed0ecb71e518dec14377cdec7d
-
SHA512
14cd833b1a24464f72b9dcc34f6f49a9b1103dc442329e25e120b6900cd2c65cef4ab27e75ca65f229d62d8c627642df37e2f9509968aae3d7b438517445786a
-
SSDEEP
12288:0MrUy90pVoHObMWkd2pke75HeLoBuFatidv:QyAiIFSe74FFxv
Static task
static1
Behavioral task
behavioral1
Sample
17b5d9e15b331732347451ae94352351975529ed0ecb71e518dec14377cdec7d.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
dumud
217.196.96.101:4132
-
auth_value
3e18d4b90418aa3e78d8822e87c62f5c
Targets
-
-
Target
17b5d9e15b331732347451ae94352351975529ed0ecb71e518dec14377cdec7d
-
Size
479KB
-
MD5
fd379066bd61ac2c6b5ab1562982c56a
-
SHA1
a9eb72854992390c6abd56617366df785ec1a709
-
SHA256
17b5d9e15b331732347451ae94352351975529ed0ecb71e518dec14377cdec7d
-
SHA512
14cd833b1a24464f72b9dcc34f6f49a9b1103dc442329e25e120b6900cd2c65cef4ab27e75ca65f229d62d8c627642df37e2f9509968aae3d7b438517445786a
-
SSDEEP
12288:0MrUy90pVoHObMWkd2pke75HeLoBuFatidv:QyAiIFSe74FFxv
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-