General
-
Target
58435be313b569e15a4ca0692b1c905cb90272e7f19eb4b3a39a8fd392efdc97
-
Size
565KB
-
Sample
241110-ffckgszgqb
-
MD5
7503c80b073a6767a3595d480749ab5b
-
SHA1
1eace95ccf0f19a2f6e0849e378f0e8a7decc499
-
SHA256
58435be313b569e15a4ca0692b1c905cb90272e7f19eb4b3a39a8fd392efdc97
-
SHA512
575db08edf442c2b6217a1bf6ee020eb7dfc8b6c2dce0fed71edf7d767969abec836a422de12a40a233843801e77735adf615bbd9f5491c1cef7710fdfe1e782
-
SSDEEP
12288:VMrMy90hVFEEMG7aJ8e7TkhTeu8wGsEMU1/6Ras:JyuM0u/OTeu8wGl16p
Static task
static1
Behavioral task
behavioral1
Sample
58435be313b569e15a4ca0692b1c905cb90272e7f19eb4b3a39a8fd392efdc97.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
darm
217.196.96.56:4138
-
auth_value
d88ac8ccc04ab9979b04b46313db1648
Targets
-
-
Target
58435be313b569e15a4ca0692b1c905cb90272e7f19eb4b3a39a8fd392efdc97
-
Size
565KB
-
MD5
7503c80b073a6767a3595d480749ab5b
-
SHA1
1eace95ccf0f19a2f6e0849e378f0e8a7decc499
-
SHA256
58435be313b569e15a4ca0692b1c905cb90272e7f19eb4b3a39a8fd392efdc97
-
SHA512
575db08edf442c2b6217a1bf6ee020eb7dfc8b6c2dce0fed71edf7d767969abec836a422de12a40a233843801e77735adf615bbd9f5491c1cef7710fdfe1e782
-
SSDEEP
12288:VMrMy90hVFEEMG7aJ8e7TkhTeu8wGsEMU1/6Ras:JyuM0u/OTeu8wGl16p
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-