General
-
Target
d9d4804923a873424e3ae14483112098b173980e6b206139b95f3a00799c4785
-
Size
438KB
-
Sample
241110-gvya6s1dnl
-
MD5
0b3fb96965cf1a19505f9366ed4bcbfa
-
SHA1
ff6b98a7164c51d6b178b38e84df4080764a3b81
-
SHA256
d9d4804923a873424e3ae14483112098b173980e6b206139b95f3a00799c4785
-
SHA512
739d1e5aadffbdfecb4fdb9c8fb4a4031beaef49a08df593b7d5e4ef485c51408cb8ac4d9af3151904c94c759f6d836e3c19fbe771a8726df4578af59feaa575
-
SSDEEP
12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ
Static task
static1
Behavioral task
behavioral1
Sample
d9d4804923a873424e3ae14483112098b173980e6b206139b95f3a00799c4785.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9d4804923a873424e3ae14483112098b173980e6b206139b95f3a00799c4785.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
1
45.9.20.59:46287
-
auth_value
ec6ada170bcec2e72f0e1f3954547f73
Targets
-
-
Target
d9d4804923a873424e3ae14483112098b173980e6b206139b95f3a00799c4785
-
Size
438KB
-
MD5
0b3fb96965cf1a19505f9366ed4bcbfa
-
SHA1
ff6b98a7164c51d6b178b38e84df4080764a3b81
-
SHA256
d9d4804923a873424e3ae14483112098b173980e6b206139b95f3a00799c4785
-
SHA512
739d1e5aadffbdfecb4fdb9c8fb4a4031beaef49a08df593b7d5e4ef485c51408cb8ac4d9af3151904c94c759f6d836e3c19fbe771a8726df4578af59feaa575
-
SSDEEP
12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-