General
-
Target
a2428add09ecd5325ce9a602550984188d162eecb2825ea6c52cb8fb1ea2683a
-
Size
1.1MB
-
Sample
241110-vadmxs1dqa
-
MD5
e63248f1b85279aca6ae445ed6eeed8e
-
SHA1
87cdf186105225e784d4805b682e866af3ed92c1
-
SHA256
a2428add09ecd5325ce9a602550984188d162eecb2825ea6c52cb8fb1ea2683a
-
SHA512
08bd1cfe6552016908cf8a60606042ce069ebff0952cd86cea745934b310ebb334a49fe45d15d3a787cc2346821cecf5486779cc27b62d8181979afa499d2102
-
SSDEEP
24576:hyH2NWIfzXZ4tu+FzKFiWI5QKH5zDP3HK9KeNvlR9fn6j9LUZwgYXw:UWN7rg+iBZzDPyNNLyj9Q6X
Static task
static1
Behavioral task
behavioral1
Sample
a2428add09ecd5325ce9a602550984188d162eecb2825ea6c52cb8fb1ea2683a.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
doma
185.161.248.75:4132
-
auth_value
8be53af7f78567706928d0abef953ef4
Targets
-
-
Target
a2428add09ecd5325ce9a602550984188d162eecb2825ea6c52cb8fb1ea2683a
-
Size
1.1MB
-
MD5
e63248f1b85279aca6ae445ed6eeed8e
-
SHA1
87cdf186105225e784d4805b682e866af3ed92c1
-
SHA256
a2428add09ecd5325ce9a602550984188d162eecb2825ea6c52cb8fb1ea2683a
-
SHA512
08bd1cfe6552016908cf8a60606042ce069ebff0952cd86cea745934b310ebb334a49fe45d15d3a787cc2346821cecf5486779cc27b62d8181979afa499d2102
-
SSDEEP
24576:hyH2NWIfzXZ4tu+FzKFiWI5QKH5zDP3HK9KeNvlR9fn6j9LUZwgYXw:UWN7rg+iBZzDPyNNLyj9Q6X
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Executes dropped EXE
-
Adds Run key to start application
-