General
-
Target
5e9aa16c0e1864cd073dedbf1e3fda5a887e9913
-
Size
364KB
-
Sample
241110-wzpl6aseqa
-
MD5
2c049dfe82b128b0199eb488f920c9fc
-
SHA1
5e9aa16c0e1864cd073dedbf1e3fda5a887e9913
-
SHA256
d9777f2fa4ca212755f2e1e1d46afcaeb090a452490f90ea1db2a54fe21aa51a
-
SHA512
d6ee228ca31c391b93633804c8885a632804910608efd3f8f03c8156724ed621492dafa855dd205cdbe25b463971e8fbe26f003c00237872b1beff71a7544d22
-
SSDEEP
6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
Behavioral task
behavioral1
Sample
5e9aa16c0e1864cd073dedbf1e3fda5a887e9913.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
5e9aa16c0e1864cd073dedbf1e3fda5a887e9913.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
0002
13.72.81.58:13413
-
auth_value
866ce0ed8cfe2be77fb43a4912677698
Targets
-
-
Target
5e9aa16c0e1864cd073dedbf1e3fda5a887e9913
-
Size
364KB
-
MD5
2c049dfe82b128b0199eb488f920c9fc
-
SHA1
5e9aa16c0e1864cd073dedbf1e3fda5a887e9913
-
SHA256
d9777f2fa4ca212755f2e1e1d46afcaeb090a452490f90ea1db2a54fe21aa51a
-
SHA512
d6ee228ca31c391b93633804c8885a632804910608efd3f8f03c8156724ed621492dafa855dd205cdbe25b463971e8fbe26f003c00237872b1beff71a7544d22
-
SSDEEP
6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-