General
-
Target
f7c4a23bb2afbf1363b07c8752ff9000c589d779c52e68d2b957935d50d97d38
-
Size
1.1MB
-
Sample
241110-pg5gbsxapb
-
MD5
68e4b5f9a26d9deaf59293bf5baf942b
-
SHA1
dcc09c67b342cd251895fad598a491ab56fac8e2
-
SHA256
f7c4a23bb2afbf1363b07c8752ff9000c589d779c52e68d2b957935d50d97d38
-
SHA512
58a8b47c6ef099be08446c2dc651dd143f8634c97eeb58ee885a41f3b3313f1a9deda124c689ce90c78327b49980c87b242b5ef12e83e289858d0a61595807b0
-
SSDEEP
24576:ty6uPVh+0/qN/6jQi7Fa75GKIhL3KD1VgirpcdThBpFs6eYY:I6uPVh+0lp7A9tMirY9xs6eY
Static task
static1
Behavioral task
behavioral1
Sample
f7c4a23bb2afbf1363b07c8752ff9000c589d779c52e68d2b957935d50d97d38.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
doma
185.161.248.75:4132
-
auth_value
8be53af7f78567706928d0abef953ef4
Targets
-
-
Target
f7c4a23bb2afbf1363b07c8752ff9000c589d779c52e68d2b957935d50d97d38
-
Size
1.1MB
-
MD5
68e4b5f9a26d9deaf59293bf5baf942b
-
SHA1
dcc09c67b342cd251895fad598a491ab56fac8e2
-
SHA256
f7c4a23bb2afbf1363b07c8752ff9000c589d779c52e68d2b957935d50d97d38
-
SHA512
58a8b47c6ef099be08446c2dc651dd143f8634c97eeb58ee885a41f3b3313f1a9deda124c689ce90c78327b49980c87b242b5ef12e83e289858d0a61595807b0
-
SSDEEP
24576:ty6uPVh+0/qN/6jQi7Fa75GKIhL3KD1VgirpcdThBpFs6eYY:I6uPVh+0lp7A9tMirY9xs6eY
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-