General
-
Target
b95c63ece067f4e05dcb4b44e2c53c3fb4ed350c42b663078d434de5d7a4e8e0
-
Size
272KB
-
Sample
241110-rqe9xa1qhm
-
MD5
b714c90bca830000168809301d7f0daf
-
SHA1
1f02727413c113de12d4044270dfabc6fed7dde7
-
SHA256
b95c63ece067f4e05dcb4b44e2c53c3fb4ed350c42b663078d434de5d7a4e8e0
-
SHA512
ea9ecfd88e875a2b286205d3910f76dda060f9cdbe10fbbafeba0128fd3d2fb5c7ba0f3dc56e3938cf25e644d46d0aba5f81b9cb5b369b0dee7539117336184b
-
SSDEEP
3072:p6j4ELH6Vt7CENpmh6sLKR+utY/edHbpiWo40mTJghm0nlQoYKgQmExNn2pU9f2O:p6jgppZsLKwuAexbpZghdnlQH5Q
Behavioral task
behavioral1
Sample
b95c63ece067f4e05dcb4b44e2c53c3fb4ed350c42b663078d434de5d7a4e8e0.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
b95c63ece067f4e05dcb4b44e2c53c3fb4ed350c42b663078d434de5d7a4e8e0.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
romik
193.233.20.12:4132
-
auth_value
8fb78d2889ba0ca42678b59b884e88ff
Targets
-
-
Target
b95c63ece067f4e05dcb4b44e2c53c3fb4ed350c42b663078d434de5d7a4e8e0
-
Size
272KB
-
MD5
b714c90bca830000168809301d7f0daf
-
SHA1
1f02727413c113de12d4044270dfabc6fed7dde7
-
SHA256
b95c63ece067f4e05dcb4b44e2c53c3fb4ed350c42b663078d434de5d7a4e8e0
-
SHA512
ea9ecfd88e875a2b286205d3910f76dda060f9cdbe10fbbafeba0128fd3d2fb5c7ba0f3dc56e3938cf25e644d46d0aba5f81b9cb5b369b0dee7539117336184b
-
SSDEEP
3072:p6j4ELH6Vt7CENpmh6sLKR+utY/edHbpiWo40mTJghm0nlQoYKgQmExNn2pU9f2O:p6jgppZsLKwuAexbpZghdnlQH5Q
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-