General
-
Target
17fdb55462b3a7e43678d3251711b056083bde9a961d4e1b88223975c32aa81b
-
Size
293KB
-
Sample
241110-vwegca1jft
-
MD5
a80d7a56c38425a2ed50326b8be2e05f
-
SHA1
9138555eeea783c156ef5e56cafe330185fb99a8
-
SHA256
17fdb55462b3a7e43678d3251711b056083bde9a961d4e1b88223975c32aa81b
-
SHA512
2d5607c1ea1a9b99db6736d0297d5d75d3dbd72b9bffdf318c7c399db7994cde0ee8428379ded39a0fb04a273b90ec4c77050ea6021bbad6f49a9cdb76acf0a5
-
SSDEEP
6144:CLaS0U0uK3XyxqmFnNfEkUM8M+ShuSz6abPuzbgwuvjB:CuS0Uqn+FGk/8Mfh5OWunn0
Static task
static1
Behavioral task
behavioral1
Sample
17fdb55462b3a7e43678d3251711b056083bde9a961d4e1b88223975c32aa81b.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
17fdb55462b3a7e43678d3251711b056083bde9a961d4e1b88223975c32aa81b.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
asia
45.9.20.168:46257
-
auth_value
218353fc70f3440d970e02bf6e2edeb1
Targets
-
-
Target
17fdb55462b3a7e43678d3251711b056083bde9a961d4e1b88223975c32aa81b
-
Size
293KB
-
MD5
a80d7a56c38425a2ed50326b8be2e05f
-
SHA1
9138555eeea783c156ef5e56cafe330185fb99a8
-
SHA256
17fdb55462b3a7e43678d3251711b056083bde9a961d4e1b88223975c32aa81b
-
SHA512
2d5607c1ea1a9b99db6736d0297d5d75d3dbd72b9bffdf318c7c399db7994cde0ee8428379ded39a0fb04a273b90ec4c77050ea6021bbad6f49a9cdb76acf0a5
-
SSDEEP
6144:CLaS0U0uK3XyxqmFnNfEkUM8M+ShuSz6abPuzbgwuvjB:CuS0Uqn+FGk/8Mfh5OWunn0
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-