General
-
Target
f3fdbfc6ba850090ebb43f673c7b72481b796188a38907e1390d1a906aba4fa8
-
Size
1.1MB
-
Sample
241110-fytlqazgpn
-
MD5
d880e468825c5c5fe317e41d348176d6
-
SHA1
6fed5eef9a6cf6d860b1f2b24017f037c7302799
-
SHA256
f3fdbfc6ba850090ebb43f673c7b72481b796188a38907e1390d1a906aba4fa8
-
SHA512
e20c7c146dccbc58fea0cd39a71474fd4333a06fe862eac6b595951862f3456c611d376ead51184b5430a89fc7ffe50c708212474a4f9e71188290d27c7e055f
-
SSDEEP
24576:xy43LargLX0iTylz3BZ3tqCssI4Q3rrJCLOPD6UxxC:kEar+0iupT3LbQ7tb7
Static task
static1
Behavioral task
behavioral1
Sample
f3fdbfc6ba850090ebb43f673c7b72481b796188a38907e1390d1a906aba4fa8.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
doma
185.161.248.75:4132
-
auth_value
8be53af7f78567706928d0abef953ef4
Targets
-
-
Target
f3fdbfc6ba850090ebb43f673c7b72481b796188a38907e1390d1a906aba4fa8
-
Size
1.1MB
-
MD5
d880e468825c5c5fe317e41d348176d6
-
SHA1
6fed5eef9a6cf6d860b1f2b24017f037c7302799
-
SHA256
f3fdbfc6ba850090ebb43f673c7b72481b796188a38907e1390d1a906aba4fa8
-
SHA512
e20c7c146dccbc58fea0cd39a71474fd4333a06fe862eac6b595951862f3456c611d376ead51184b5430a89fc7ffe50c708212474a4f9e71188290d27c7e055f
-
SSDEEP
24576:xy43LargLX0iTylz3BZ3tqCssI4Q3rrJCLOPD6UxxC:kEar+0iupT3LbQ7tb7
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-