General
-
Target
c4482b92f8b68a91ce8a7ded5b136ac56092898c21119f4a55da6c12ab5496d7
-
Size
372KB
-
Sample
241110-b4degazkel
-
MD5
bad4b9d720b749fbf592c65a0283bdc1
-
SHA1
f954589ef84b146c0dffa0b98e98791ad895ee0e
-
SHA256
c4482b92f8b68a91ce8a7ded5b136ac56092898c21119f4a55da6c12ab5496d7
-
SHA512
4c20b21d5792bfc662548fdcba425aa913b9e6a1460dab9f515e07069aa67dfeb49a45d0fd00431c5847703823ed847661a348b4fb73a1aef47bfe7be2fd8f52
-
SSDEEP
6144:iEgWNCOsa1ipGgSkONMRmd3Ij+4MNnWRJTZFy2Z16:iEgWNCZ8gSrUkY2WnZY
Static task
static1
Behavioral task
behavioral1
Sample
c4482b92f8b68a91ce8a7ded5b136ac56092898c21119f4a55da6c12ab5496d7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c4482b92f8b68a91ce8a7ded5b136ac56092898c21119f4a55da6c12ab5496d7.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
ww
193.106.191.67:44400
-
auth_value
5a1b28ccd05953f5c3f99729c12427cc
Targets
-
-
Target
c4482b92f8b68a91ce8a7ded5b136ac56092898c21119f4a55da6c12ab5496d7
-
Size
372KB
-
MD5
bad4b9d720b749fbf592c65a0283bdc1
-
SHA1
f954589ef84b146c0dffa0b98e98791ad895ee0e
-
SHA256
c4482b92f8b68a91ce8a7ded5b136ac56092898c21119f4a55da6c12ab5496d7
-
SHA512
4c20b21d5792bfc662548fdcba425aa913b9e6a1460dab9f515e07069aa67dfeb49a45d0fd00431c5847703823ed847661a348b4fb73a1aef47bfe7be2fd8f52
-
SSDEEP
6144:iEgWNCOsa1ipGgSkONMRmd3Ij+4MNnWRJTZFy2Z16:iEgWNCZ8gSrUkY2WnZY
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-