General
-
Target
ead496e46f11476fb3dbc360688662115574f5fa01597d7e84871435030b5de9
-
Size
468KB
-
Sample
241110-em671ayncs
-
MD5
1bcaf2dc1e6ba9e6a332079e0d301d73
-
SHA1
5bd40c151ee193fb2ac9aa1b3139729ba62eff75
-
SHA256
ead496e46f11476fb3dbc360688662115574f5fa01597d7e84871435030b5de9
-
SHA512
27a6fa719301e728d232e68c145dedbbdb9e7ff99df728feab876397399fdf938f0b7a18f6d1573e02b43bd5989ad0812a4aeb895256af814509b2bbc6d38273
-
SSDEEP
12288:aMruy90Ot0TgbNykU5ts5wCmCpVNUCQ0VYz:QytgIs5omubi
Static task
static1
Behavioral task
behavioral1
Sample
ead496e46f11476fb3dbc360688662115574f5fa01597d7e84871435030b5de9.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
fusa
193.233.20.12:4132
-
auth_value
a08b2f01bd2af756e38c5dd60e87e697
Targets
-
-
Target
ead496e46f11476fb3dbc360688662115574f5fa01597d7e84871435030b5de9
-
Size
468KB
-
MD5
1bcaf2dc1e6ba9e6a332079e0d301d73
-
SHA1
5bd40c151ee193fb2ac9aa1b3139729ba62eff75
-
SHA256
ead496e46f11476fb3dbc360688662115574f5fa01597d7e84871435030b5de9
-
SHA512
27a6fa719301e728d232e68c145dedbbdb9e7ff99df728feab876397399fdf938f0b7a18f6d1573e02b43bd5989ad0812a4aeb895256af814509b2bbc6d38273
-
SSDEEP
12288:aMruy90Ot0TgbNykU5ts5wCmCpVNUCQ0VYz:QytgIs5omubi
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-