General
-
Target
0cbe2e1c1d6c11f957fbff81a4661c07835e268a6f4565832b852a85a16b0dbb
-
Size
411KB
-
Sample
241110-lf4xmatgkk
-
MD5
d9aec4e20ef9d78114110b7cc4bbd42a
-
SHA1
12f707230e3a9f3460cd10258e6bcb8863008c7e
-
SHA256
0cbe2e1c1d6c11f957fbff81a4661c07835e268a6f4565832b852a85a16b0dbb
-
SHA512
195d3a36214f6a59b3cb60a27a3d874f2b2f5fea14f888ca68a2b862bada5b2048b2f456c314b393db1ff40e92316054ccee721fc3e0f7b7820864fdda31f612
-
SSDEEP
6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/
Static task
static1
Behavioral task
behavioral1
Sample
0cbe2e1c1d6c11f957fbff81a4661c07835e268a6f4565832b852a85a16b0dbb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0cbe2e1c1d6c11f957fbff81a4661c07835e268a6f4565832b852a85a16b0dbb.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
11
45.9.20.157:46257
-
auth_value
344c26d7f808f9c29e47633026f19aa5
Targets
-
-
Target
0cbe2e1c1d6c11f957fbff81a4661c07835e268a6f4565832b852a85a16b0dbb
-
Size
411KB
-
MD5
d9aec4e20ef9d78114110b7cc4bbd42a
-
SHA1
12f707230e3a9f3460cd10258e6bcb8863008c7e
-
SHA256
0cbe2e1c1d6c11f957fbff81a4661c07835e268a6f4565832b852a85a16b0dbb
-
SHA512
195d3a36214f6a59b3cb60a27a3d874f2b2f5fea14f888ca68a2b862bada5b2048b2f456c314b393db1ff40e92316054ccee721fc3e0f7b7820864fdda31f612
-
SSDEEP
6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-