General
-
Target
39a520eb98d157b5172a33412359a3a7b0c7947172ca944e33266f7193a85c7b
-
Size
468KB
-
Sample
241110-j5bw2asma1
-
MD5
3c57c801172b7ac3e3ed6c63eb3fc0ae
-
SHA1
66563ec800fe815e9188bd3dc80ad02fdbab9670
-
SHA256
39a520eb98d157b5172a33412359a3a7b0c7947172ca944e33266f7193a85c7b
-
SHA512
583779d8d96bbedef75ad266a87f926e646a5249bc855041c7942b61287a9d0e39bee42d04df7c256ce63d01e5d8e405e1bb83b2ef0f90ae75e96862cf4e20a7
-
SSDEEP
12288:5Mrfy90fLXTjHoz/19RMWEZb0P855H9us:GykTg93I0P8DHF
Static task
static1
Behavioral task
behavioral1
Sample
39a520eb98d157b5172a33412359a3a7b0c7947172ca944e33266f7193a85c7b.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
fukia
193.233.20.13:4136
-
auth_value
e5783636fbd9e4f0cf9a017bce02e67e
Targets
-
-
Target
39a520eb98d157b5172a33412359a3a7b0c7947172ca944e33266f7193a85c7b
-
Size
468KB
-
MD5
3c57c801172b7ac3e3ed6c63eb3fc0ae
-
SHA1
66563ec800fe815e9188bd3dc80ad02fdbab9670
-
SHA256
39a520eb98d157b5172a33412359a3a7b0c7947172ca944e33266f7193a85c7b
-
SHA512
583779d8d96bbedef75ad266a87f926e646a5249bc855041c7942b61287a9d0e39bee42d04df7c256ce63d01e5d8e405e1bb83b2ef0f90ae75e96862cf4e20a7
-
SSDEEP
12288:5Mrfy90fLXTjHoz/19RMWEZb0P855H9us:GykTg93I0P8DHF
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-