General
-
Target
816767f9f3db7543218a283da42560889992477b37917eb18cdbb1d3cc839ccb
-
Size
410KB
-
Sample
241110-gtqvpstrcq
-
MD5
c38f2600f6eaf718fa357a0108e9a301
-
SHA1
964ac71fb1687b291c3c6b12b66ec127f1e55e33
-
SHA256
816767f9f3db7543218a283da42560889992477b37917eb18cdbb1d3cc839ccb
-
SHA512
98ebaee68fbbef297c95c572c987d4a60f137d7a26d73b8ec4d7d6af3096bfd987064683a36ea0b81482d9e73f1b94828afdd6befbb036c52f68869fcb4575a2
-
SSDEEP
6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG
Static task
static1
Behavioral task
behavioral1
Sample
816767f9f3db7543218a283da42560889992477b37917eb18cdbb1d3cc839ccb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
816767f9f3db7543218a283da42560889992477b37917eb18cdbb1d3cc839ccb.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
11
45.9.20.157:46257
-
auth_value
344c26d7f808f9c29e47633026f19aa5
Targets
-
-
Target
816767f9f3db7543218a283da42560889992477b37917eb18cdbb1d3cc839ccb
-
Size
410KB
-
MD5
c38f2600f6eaf718fa357a0108e9a301
-
SHA1
964ac71fb1687b291c3c6b12b66ec127f1e55e33
-
SHA256
816767f9f3db7543218a283da42560889992477b37917eb18cdbb1d3cc839ccb
-
SHA512
98ebaee68fbbef297c95c572c987d4a60f137d7a26d73b8ec4d7d6af3096bfd987064683a36ea0b81482d9e73f1b94828afdd6befbb036c52f68869fcb4575a2
-
SSDEEP
6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-