General
-
Target
476cd726e86fd78a53c6202a6c5d37003609bdd98c054363809d4c162592d6bf
-
Size
434KB
-
Sample
241110-kaceratalm
-
MD5
ea4b2fecc600ea39a4a54161bdaf75a9
-
SHA1
e6e09e22bf9419abc77d7ecc5fcf654025fbbcff
-
SHA256
476cd726e86fd78a53c6202a6c5d37003609bdd98c054363809d4c162592d6bf
-
SHA512
61c8ff88430d183b3a1e3e3f28c2635ff7e4b5822470f9505d35f2aa6138ce2244875e33bde48ddcbb9c2e26ec053fda0a9b55cd1594ba067f60881228c9b6cf
-
SSDEEP
6144:jT+p2+wmSFThVQdmWGwMLqlhC5wvsu6GZcfo0Hz21OOuq0tc+o:Pw6FHimWrJhC5Osu6G6fo0HzLOuq0tj
Static task
static1
Behavioral task
behavioral1
Sample
476cd726e86fd78a53c6202a6c5d37003609bdd98c054363809d4c162592d6bf.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
476cd726e86fd78a53c6202a6c5d37003609bdd98c054363809d4c162592d6bf.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
asia
45.9.20.240:46257
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
-
Target
476cd726e86fd78a53c6202a6c5d37003609bdd98c054363809d4c162592d6bf
-
Size
434KB
-
MD5
ea4b2fecc600ea39a4a54161bdaf75a9
-
SHA1
e6e09e22bf9419abc77d7ecc5fcf654025fbbcff
-
SHA256
476cd726e86fd78a53c6202a6c5d37003609bdd98c054363809d4c162592d6bf
-
SHA512
61c8ff88430d183b3a1e3e3f28c2635ff7e4b5822470f9505d35f2aa6138ce2244875e33bde48ddcbb9c2e26ec053fda0a9b55cd1594ba067f60881228c9b6cf
-
SSDEEP
6144:jT+p2+wmSFThVQdmWGwMLqlhC5wvsu6GZcfo0Hz21OOuq0tc+o:Pw6FHimWrJhC5Osu6G6fo0HzLOuq0tj
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-