General
-
Target
34759e50df262be35ceec8ca34e2805537027ea5c27779e4cc1052d402e53769
-
Size
1.1MB
-
Sample
241110-lbx9aaxkfn
-
MD5
f74c3ab777531e28bcaec0a9169e7245
-
SHA1
6aa4d109ca99a9dfeef6746b45a7fecfd3cf5e79
-
SHA256
34759e50df262be35ceec8ca34e2805537027ea5c27779e4cc1052d402e53769
-
SHA512
10623bc8550ab302a56d45193c05fcf49233363425abdf98e80059bebbc62b7f078128cce9f7f01b33f6987a1dbdd0ce56b982860d0859977d45e48081602147
-
SSDEEP
24576:SysADYIY53rJpoZRoM+QXc43ac+i72Z0KO9ZpzGe6pnPEJP131he:59DYIs3rJy3nJcOGZABGeDvh
Static task
static1
Behavioral task
behavioral1
Sample
34759e50df262be35ceec8ca34e2805537027ea5c27779e4cc1052d402e53769.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
doma
185.161.248.75:4132
-
auth_value
8be53af7f78567706928d0abef953ef4
Targets
-
-
Target
34759e50df262be35ceec8ca34e2805537027ea5c27779e4cc1052d402e53769
-
Size
1.1MB
-
MD5
f74c3ab777531e28bcaec0a9169e7245
-
SHA1
6aa4d109ca99a9dfeef6746b45a7fecfd3cf5e79
-
SHA256
34759e50df262be35ceec8ca34e2805537027ea5c27779e4cc1052d402e53769
-
SHA512
10623bc8550ab302a56d45193c05fcf49233363425abdf98e80059bebbc62b7f078128cce9f7f01b33f6987a1dbdd0ce56b982860d0859977d45e48081602147
-
SSDEEP
24576:SysADYIY53rJpoZRoM+QXc43ac+i72Z0KO9ZpzGe6pnPEJP131he:59DYIs3rJy3nJcOGZABGeDvh
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-