General
-
Target
5bc005a23398d5c4b52eb6214b6f643f6320fe5e5217ce383695d41426c9de7d
-
Size
302KB
-
Sample
241110-dgsxra1mcp
-
MD5
cd138d816616198a78c58ba9c628d53a
-
SHA1
4a32efa41272198e841e93d68c558f080adfedd5
-
SHA256
5bc005a23398d5c4b52eb6214b6f643f6320fe5e5217ce383695d41426c9de7d
-
SHA512
1a101457f8163a0c0d3a524d8e0c66f3454313df1a3d4366e0a7de1e2361233ada489cd0a472f241aabafc237b912475989965105a36d1143d8350d1dfd5d1ee
-
SSDEEP
3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ
Static task
static1
Behavioral task
behavioral1
Sample
5bc005a23398d5c4b52eb6214b6f643f6320fe5e5217ce383695d41426c9de7d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5bc005a23398d5c4b52eb6214b6f643f6320fe5e5217ce383695d41426c9de7d.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
11
45.9.20.157:46257
-
auth_value
344c26d7f808f9c29e47633026f19aa5
Targets
-
-
Target
5bc005a23398d5c4b52eb6214b6f643f6320fe5e5217ce383695d41426c9de7d
-
Size
302KB
-
MD5
cd138d816616198a78c58ba9c628d53a
-
SHA1
4a32efa41272198e841e93d68c558f080adfedd5
-
SHA256
5bc005a23398d5c4b52eb6214b6f643f6320fe5e5217ce383695d41426c9de7d
-
SHA512
1a101457f8163a0c0d3a524d8e0c66f3454313df1a3d4366e0a7de1e2361233ada489cd0a472f241aabafc237b912475989965105a36d1143d8350d1dfd5d1ee
-
SSDEEP
3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-